For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Joe_Willis_4776's avatar
Joe_Willis_4776
Icon for Nimbostratus rankNimbostratus
Sep 22, 2008

Default Gateway at Server level versus SNAT-AutoMap at VIP level

Hi,     I have what I hope to be a simple (and maybe a "duh") question. How expensive is it, in terms of CPU cycles, to assign a SNAT Pool of Automap to every VIP to enforce traffic to egr...
config
design
JRahm's avatar
JRahm
Icon for Admin rankAdmin
Sep 23, 2008
We have several hundred mb/s flowing through a 3400 on 400 different virtuals (development box), all of which have their own snat address. CPU and memory are barely registering...

 

 

Snat automap is fine unless you are going to exceed 64k connections/second, at which point you'll need a snatpool. We match the 4th octet of the virtual IP address to the snat address so we can track connections through the F5 more easily.