For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Nik's avatar
Nik
Icon for Cirrus rankCirrus
Jun 29, 2009

forwarding/nat/snat help

hi, i've been scouring the documentation and forums but have had no success solving my problem. basically the issue is that we have an application that is very picky about incoming packets as a denia...
config
design
Nik's avatar
Nik
Icon for Cirrus rankCirrus
Jul 01, 2009

Posted By hoolio on 07/01/2009 12:28 AM

 

Are you trying to load balance this traffic? What protocol is the application using? Does the application need to initiate its own connections back to the client?

 

I'm guessing a Performance layer4 VIP with a FastL4 profile without SNAT on the virtual server might work.

 

Aaron

 

 

 

it's a protocol proprietary to this application, but would the protocol matter at all? i want to forward packets without analyzing/parsing/changing them at all. this is why i had mentioned that we have succeeded in doing this through checkpoint.

 

 

as far as connections - the client initiates the starting handshake and makes all requests after. there is a socket that's kept open but the server itself never makes an initial request to the client. i have tried making a snat for this particular machine but that didn't seem to do anything.

 

 

fastl4 + performance layer4 + address/port translation + no snat works for *everything else* i can throw at it (msrdp, http, etc) but not this protocol.