For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

jcrew's avatar
jcrew
Icon for Nimbostratus rankNimbostratus
Apr 29, 2014

Recommended best practice for SNAT Translation Idle Timeout

I'm trying to find any information on the IP Idle Timeout setting for SNAT translations. Would this value on be used if using a forwarding VIP and not TCP or UDP virtual service?   TCP Idle Timeou...
application delivery
design
LTM
performance
What_Lies_Bene1's avatar
What_Lies_Bene1
Icon for Cirrostratus rankCirrostratus
Apr 29, 2014

Be aware that in nearly all cases the minimum Idle Timeout that applies to a connection takes precedence. The only exception to this rule is where TCP profile client and server-side timeouts differ, in which case the longest applies.

 

The default SNAT idle timeout is 'indefinite'. You can change this for any SNAT type except SNAT automap.

 

If you're highest timeout for a protocol is 300s I'd set your SNAT timeout to this.