F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

drhawkings_2156's avatar
drhawkings_2156
Icon for Nimbostratus rankNimbostratus
May 03, 2010

inbound is DNAT and outbound is SNAT?

May I know what is the difference between theese two?     virtual kmportal_time_vs { destination 217.26.165.12:any ip protocol tcp profile fastL4 pool kmportal_pool   pool kmportal_pool { mon...
config
design
Michael_Yates's avatar
Michael_Yates
Icon for Nimbostratus rankNimbostratus
May 06, 2010
If SNAT is applied to a Virtual Server, any traffic behind the F5 will appear to have come from the F5.

 

 

Client IP Address - 10.10.10.10

 

Virtual Server IP Address - 20.20.20.20

 

Pool Server IP Address - 30.30.30.30

 

 

If SNAT is applied to the Virtual Server then the Pool Server will see all traffic coming from 20.20.20.20. The only way that the Pool Server will see the Client IP Address with SNAT Enabled is using X-Forward.

 

 

Think of SNAT as the man in the middle. Client only knows about the Virtual Server and the Pool Server only knows about the Virtual Server. Client and Pool server never know about one another (without X-Forward).