For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

drhawkings_2156's avatar
drhawkings_2156
Icon for Nimbostratus rankNimbostratus
May 04, 2010

inbound is DNAT and outbound is SNAT?

May I know what is the difference between theese two?     virtual kmportal_time_vs { destination 217.26.165.12:any ip protocol tcp profile fastL4 pool kmportal_pool   pool kmportal_pool { mon...
config
design
Michael_Yates's avatar
Michael_Yates
Icon for Nimbostratus rankNimbostratus
May 06, 2010
If SNAT is applied to a Virtual Server, any traffic behind the F5 will appear to have come from the F5.

 

 

Client IP Address - 10.10.10.10

 

Virtual Server IP Address - 20.20.20.20

 

Pool Server IP Address - 30.30.30.30

 

 

If SNAT is applied to the Virtual Server then the Pool Server will see all traffic coming from 20.20.20.20. The only way that the Pool Server will see the Client IP Address with SNAT Enabled is using X-Forward.

 

 

Think of SNAT as the man in the middle. Client only knows about the Virtual Server and the Pool Server only knows about the Virtual Server. Client and Pool server never know about one another (without X-Forward).