For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

spud_141786's avatar
spud_141786
Icon for Nimbostratus rankNimbostratus
Mar 25, 2014

evaluating Automap port usage

One drawback of using Automap is source TCP port exhaustion. Is there a convenient way to view the "high water mark" for Automap source port usage for a specific self IP address?  
application delivery
auto map
LTM
management
safeinst_110941's avatar
safeinst_110941
Icon for Cirrus rankCirrus
Mar 26, 2014

The rule of thumb is 60k concurrent connections per SNAT pool member. Just keep an eye on your connection counts and always build your configuration so that the box tips over before the max of your configuration is reached.

 

Keep in mind that multiple Virtual Servers using SNAT automap means you have to aggregate your connection counts across the applications. There are easy ways to see these connection counts via the TMUI (in statistics) or from the command line.

 

IP's tend to come cheaply, when in doubt build larger than needed.