Forum Discussion

gnomemade_16346's avatar
gnomemade_16346
Icon for Nimbostratus rankNimbostratus
Jun 02, 2016

LTM in front of HSM

We have some Safenet Luna HSM's that require the connecting host to be in an ACL on the HSM. It doesn't use http or a common protocol. The problem we're running into is that the ACL only holds 16 ip ...
application delivery
iRules
LTM
Vijay_E's avatar
Vijay_E
Icon for Cirrus rankCirrus
Jun 02, 2016

You can use SNAT (automap or snatpool). However, each SNAT IP will provide you with 65K connections. Even if you use all the SNAT IP in the ACL (16 in total) in HSM, you will have a theoretical limitation of 16*65K (1,040 K) connections, if my understanding is right. You will hit limits as far as scale is concerned.

 

sol7820: Overview of SNAT features