For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

drhawkings_2156's avatar
drhawkings_2156
Icon for Nimbostratus rankNimbostratus
May 04, 2010

LTM migration for Proxy, Anti-Spam and web servers

Can anyone advise on the configuration of LTM for Proxy, Anti-Spam and web servers?   The objective is to load balance server traffic or active/passive.   Attached is the diagram   The confus...
config
design
Michael_Yates's avatar
Michael_Yates
Icon for Nimbostratus rankNimbostratus
May 06, 2010
If you don't have to use SNAT'ing, I wouldn't.

 

 

If the F5 owns the subnets that these devices live on (192.168.1.4 for Anti-Spam and 10.7.2.2 for Proxy server), then you do not need to enable SNAT, and no source translation will be required. That would be the optimal setup.

 

 

If you must use SNAT and you have Applications the require the Client IP Address then you will need to configure X-Forward.