Forum Discussion

uni's avatar
uni
Icon for Altocumulus rankAltocumulus
Apr 11, 2012

Persistent SNAT address based on session cookie

I have a client whose application is sensitive to the client IP address changing within a session. In their environment, there is some selective SNATting (internal clients are SNATted, public IPs ar...
config
design
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Apr 11, 2012
Hi Stephen,

 

 

I think the iRule looks great for your scenario. Another option for ensuring the SNAT IP is consistent across connections is to use a hash. It's slightly more complicated but supports non-HTTP protocols and doesn't require storing any records on LTM or the client.

 

 

https://devcentral.f5.com/wiki/iRules.snat_pool_persistence.ashx

 

 

Aaron