Selective SNAT rule, looking for suggestions

Also, I've elected to SNAT using the VIP address itself rather than use automap as that will give a better indication in the webserver logs whether the connection was related to an LTM monitor or whether the client was actually SNAT'ed.

 

 

Hi Nathan -

 

 

I like your "SNAT to local VS address" approach, will probably use that in future, but just thought I'd clarify one minor thing: If you are running a redundant pair, all monitors will be sourced from the non-floating selfIPs, while SNAT automap will only use the floating ones, so you already have some natural separation there...

 

 

Thanks for the contrib!

 

/deb