Packet flow - order of NAT, SNAT, routing etc.

Hi Ronni,

 

 

Here's a start for the precedence of LTM listeners:

 

 

sol9038: The order of precedence for local traffic object listeners

 

http://support.f5.com/kb/en-us/solutions/public/9000/000/sol9038.html

 

 

Aaron

a very good question, but still no answer. seems like there should be some diagram somewhere, but i can't find it.

 

 

does anyone have some more info?

I think the article needs some improvement, this is rather confusing and wrong: "For example, a SNAT with an origin address of 10.10.64.0/24 takes precedence over a SNAT with an origin of default. Additionally, a SNAT with an origin address of 10.10.64.2 takes precedence over a NAT with an origin address of 10.10.64.2."

OK, I've come up with the following based on that article, I'll try and add a bit more later if I can;

VS’s – higher precedence on address, not port;
   :
   :*
   :
   :*
   *:
   *:*
(From v9.4 disabled by default: When the bigpipe db TM.ContinueMatching variable is set to true, BIG-IP LTM will check if another virtual server is available to handle a request if the higher precedence virtual server is down or disabled.)

The most specific takes precedence;
   SNAT
   NAT

have you seen this one (BIG-IP Path Graph by James)?

 

 

A diagram on the basic path in LTM

 

https://devcentral.f5.com/community/group/aft/62252/asg/50

thank you nitass, that is even more then i expected to find. anyone know if this is still pretty much accurate for v11?

i send the original author a pm here and got a link to an updated version:

 

http://www.bragi0.com/F5_BigIP_Path_Graph_v1_7.pdf

 

 

as it is quite high level it should still be accurate for version 11.

Link mentioned in above post is dead.

 

Could someone please post the active link.

 

 

Thanks

Anybody find a copy of this?

Jason kindly put it in the downloads for me, see:

 

https://devcentral.f5.com/d/big-ip-v9-flow-path