F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

moulingi_138795's avatar
moulingi_138795
Icon for Nimbostratus rankNimbostratus
Dec 31, 2013

SNAT and Forwarding (IP) virtual servers

Hi   In following topology:   (Network) ==> Firewall ==> LTM ==> Servers   I've setup a 'forwarding (IP)' virtual server on the LTM to handle at once Servers=>Network traffic and Network=>Se...
BIG-IP Access Policy Manager (APM)
design
security
nitass's avatar
nitass
Icon for Employee rankEmployee
Dec 31, 2013

If I do setup snat at 'Virtual server' level, Snat will then apply for all connections hitting that VIP... So I will loose the real clients IP addresses in servers logs... right ?

 

yes but you can use x-forwarded-for http header.

 

sol4816: Using the X-Forwarded-For HTTP header to preserve the original client IP address for traffic translated by a SNAT

 

http://support.f5.com/kb/en-us/solutions/public/4000/800/sol4816.html

 

otherwise, you have to selective snat using irule or configure like what you did.

 

Selective SNAT

 

https://devcentral.f5.com/wiki/irules.selectivesnat.ashx