F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Manuel_Gabaldon's avatar
Manuel_Gabaldon
Icon for Nimbostratus rankNimbostratus
Apr 29, 2008

Outbound SNAT matching inbound Virtual Servers

Hi,     Our customers are always asking us for a load balancing solution that provides bi-directional correspondence between a virtual server address (inbound) and the SNAT address being applied...
config
design
Manuel_Gabaldon's avatar
Manuel_Gabaldon
Icon for Nimbostratus rankNimbostratus
May 06, 2008
Yeah, certainly there isn't a good way. I've thought of another way, however. What about using the Universal Persistence Table as a way of creating these entries dynamically?

 

 

I mean, we need outgoing traffic to behave just like it was coming out from the virtual server the node belongs to. If we use the UP table (or a modifiable class) to create entries like "node address:virtual server address" whenever an incoming connection occurs and we let it there, the BIG-IP will "learn" how to do the correspondent SNAT properly.

 

 

I know that this can fail sometimes, but it seems elegant, doesn't it?