For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

pjcampbell_7243's avatar
pjcampbell_7243
Icon for Cirrus rankCirrus
Apr 07, 2009

Machine calling VIP, VIP, pool members all on same network?

I was talking to our network admin and he was suggesting that if this happens, there will be problems since the traffic will not go back through the BIG-IP but go directly from the pool member back to...
config
design
dennypayne's avatar
dennypayne
Icon for Employee rankEmployee
Apr 09, 2009
If you aren't using SNAT, the LTM preserves the client's source IP by default when it sends the packet to the pool member. So the pool member will respond using its' own routing table to the client. If the client is on the same subnet, it's Layer 2 connected and will arp for the client and send the response directly to him, bypassing the LTM. The client will reset that packet, because he never opened up a session with the pool member directly.

 

 

Denny