For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Vova_1985_18320's avatar
Vova_1985_18320
Icon for Nimbostratus rankNimbostratus
Aug 18, 2015

Preserver client IP

Hi dear experts,   I looking for a way to preserver clients IP for TCP request (no http profile used) using SNAT. I read in some blogs that it possible to do it with iRule, but people talking abou...
management
Hamish's avatar
Hamish
Icon for Cirrocumulus rankCirrocumulus
Aug 19, 2015

There's nothing secure about SNAT. It's SOURCE NAT. Anyone tells you it's secure, feel free to laugh at them.

 

You could use policy routing, either on the linux server, or at the network layer to route non-http traffic back to the big (e.g. by matching on the SOURCE PORT of the RETURN traffic to the client. This is similar to the way you'd do it with a WAN accelerator to accelerate specific traffic only if you do that.

 

H