Forum Discussion

F5Newbie's avatar
F5Newbie
Icon for Altostratus rankAltostratus
Mar 03, 2021

How to make outbound traffic to flow through an F5

Hello,   We have an F5 LTM that front our backend middleware server-pair in a HA setup. So F5 serves as a LB that forward incoming traffic to the active one.   But we also need the backend server...
application delivery
BIG-IP
Enterprise Manager
F5Newbie's avatar
F5Newbie
Icon for Altostratus rankAltostratus

Thank you so much Simon and boneyard!

 

I did quite some reading. Now I understand your initial suggestion a lot better.

 

It seems a second F5 will be needed to perform source NAT for outbound communication sessions so all departing traffic carries the IP of the inbound F5, or original VIP address. Maybe one day there will be a F5 device that can handle both inbound and outbound sessions?

 

Armed with the understanding, I'll engage our F5 team to devise a solution to our Middleware challenge.

Simon_Blakely's avatar
Simon_Blakely
Icon for Employee rankEmployee
Mar 06, 2021

> It seems a second F5 will be needed to perform source NAT for outbound communication sessions so all departing traffic carries the IP of the inbound F5, or original VIP address. Maybe one day there will be a F5 device that can handle both inbound and outbound sessions?

 

I don't understand where you got that idea from. It is perfectly feasible to implement this in a single LTM device. As I say, this is very common and does not require multiple BigIP devices.