Forum Discussion
sstaples2_87446
Nimbostratus
Oct 16, 2008Maintain the Src IP while SNATing to multiple pools
All,
Apologies if this is answered here already -- I looked for a while and could not find it, but please directly to that thread if appropriate.
I have BigIP LTM 9.4.4 and I need a configuration to allow pools of source IP addresses to SNAT to a common IP on the "internal" side.
So in a simplified example, servers are pooled together, and I want the target server to see a common IP address for all servers in a pool, but this IP needs to be unique across different pools.
I hope my diagram doesn't make the question more confusing. Everything is on the same as the LTM is being used in a "loopback" configuration just to translate within the same subnet. I need a common VIP (IP/port) used by all client servers in the network:
+- F5 LTM ----------------+ + server --+
Server A --\ | IP A --\ | | |
Server B ------> | IP B -----> SNAT_POOL_1 | <-> | src IP 1 |
Server C --/ | IP C --/ | | |
| | | |
Server D ------> | IP D -----> SNAT_POOL_2 | <-> | src IP 2 |
Server E --/ | IP E --/ | | |
+-------------------------+ +----------+
I've created SNAT lists containing the client server IPs (A,B,C,D,E) and associated these with created SNAT pools containing the new source IP (1,2). When I create the VIP, I need to associate a specific SNAT_POOL, auto-map which uses the self IP, or none which passes through the client server IP. I don't see how I can get the combination.
Is it possible?
Thanks in advance for your help.
-Scott
- sstaples2_87446
Nimbostratus
BTW -- I have successfully done this with an iRule. We already have a complex iRule in place inspecting the packet and making routing decisions based on specific payload. We are very concerned with performance, and I was hoping to keep this clean within core functionality. If the only way to do it is an iRule than I'll be interested to confirm that as well. - hoolio
Cirrostratus
Hi Scott, - sstaples2_87446
Nimbostratus
Aaron -- Thanks for the info.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects