Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

RoutingLoop_179's avatar
RoutingLoop_179
Icon for Cirrus rankCirrus
Mar 07, 2013

Dynamic 1:1 SNAT irule

Hi guys - looking for some feedback regarding my irule for 1:1 dynamic NAT. e.g we might use 10/8 on the client inside but then have only have a /17 pool on public outside, although over allocated t...
application delivery
dev
devops
irules
Philippe_CLOUP's avatar
Philippe_CLOUP
Icon for Employee rankEmployee
May 06, 2014

Be sure to use a non SP-DAG configured platform. With SP-DAG enabled VLAN, the IP address is linked to a TMM. If you try to SNAT with a different IP than the one linked to the landing TMM, you will have TMM to TMM packets forwarding, which can impact the overall performance.