F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

FFiver_28568's avatar
FFiver_28568
Icon for Nimbostratus rankNimbostratus
Jun 25, 2007

Precedence

Hey all!     Quick question: can anyone tell me the precedence/order the F5 uses to evaluate irules/nats/snats? Any help is much appreciated!     Thanks,   Scott
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Jun 26, 2007
I think it's iRule > virtual server > SNAT.

 

 

If you have a default SNAT defined and SNAT on the virtual server, the virtual server's configuration will take precedence. You can have a SNAT enabled on a virtual server or configured globally, and then disable it in a rule.

 

 

I wouldn't suggest trying to mix NATs and SNATs on the same addresses. A SNAT or one-to-one virtual server should provide more granularity and fewer issues.

 

 

Aaron