For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

jcrew's avatar
jcrew
Icon for Nimbostratus rankNimbostratus
Apr 29, 2014

Recommended best practice for SNAT Translation Idle Timeout

I'm trying to find any information on the IP Idle Timeout setting for SNAT translations. Would this value on be used if using a forwarding VIP and not TCP or UDP virtual service?   TCP Idle Timeou...
application delivery
design
LTM
performance
Joad's avatar
Joad
Icon for Nimbostratus rankNimbostratus
Sep 24, 2018

Hi, I've read this:

 

https://support.f5.com/csp/article/K6017

 

If the connection matches a virtual server and automap SNAT object, the system uses the idle timeout specified in the protocol profile. For more information about idle session timeouts, refer to K7606: Overview of BIG-IP LTM idle session timeouts.

 

and then the K7606 mentioned above:

 

https://support.f5.com/csp/article/K7606

 

With the idle timeout set to Indefinite, the BIG-IP system internally limits UDP and IP SNAT translation idle timeout periods to a maximum of 300 seconds.

 

So, which timeout win if I've an UDP VS configured with both, UDP profile set to 900 sec. and SNAT automap ?

 

Thank you