For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Blair_Murray_10's avatar
Blair_Murray_10
Icon for Nimbostratus rankNimbostratus
Feb 03, 2016

Load Balancing UDP 514 Syslog traffic

We have a need to load Balance syslog traffic between 2 servers.   Created a Standard VS using Service Port 514 that sends traffic to the Pool of 2 Servers. using a global SNAT so on the VS the ...
application delivery
iRules
Blair_Murray_10's avatar
Blair_Murray_10
Icon for Nimbostratus rankNimbostratus
Feb 15, 2016

Thanks Brad, this did the trick

On the Pool we changed the Allow SNAT to No

On the Virtual Server we changed the Source Address Translation to Auto Map and added the iRule 
when CLIENT_ACCEPTED {  
     snat [IP::client_addr]  
}
Subrun's avatar
Subrun
Icon for Cirrostratus rankCirrostratus
Mar 05, 2020

Whats the logic of above while disabling with Allow SNAT to NO and again with iRule do a SNAT ?

  • Brad_Parker's avatar
    Brad_Parker
    Icon for Cirrus rankCirrus
    Mar 06, 2020

    It's been quite a while since this original post, but I will try to help. There isn't really any logic in setting the pool to not allow SNAT and the iRule. Those were two different suggestions to overcome a global SNAT. The iRule should be sufficient on its own. If there wasn't a global SNAT the easiest solution is to simply turn Source Address Translation to none on the virtual server.