Clarification of SelectiveSnat/iRule SNAT. Need help.

Hi Bhattman,

 

I have 2 F5 at DMZ as (active - passive) and I have F5 at internal zone also. If I configure VS at the Internal F5, and the pool members are inside my internal serverfarm, without automap and all my clients (users) can access to the VS. But if I configure the VS at DMZ-F5, I need to use automap in order to my clients to access the VS? what will it possible the cause? is it because my F5 has 2 self IP (active-passive)? so when the packet going back from my server to client don't know the symmetric traffic path?

 

 

Another questions, if the server need to be accessed by internet users, I should configure the VS at DMZ F5, but what is the better approach, should I configure the pool member is the internal F5 IP or directly my server IP Address? if I put the internal F5 IP then there is additional hop.

 

 

Thanks