For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

testimony_17780's avatar
testimony_17780
Oct 04, 2018

SNAT ENQUIRIES

Hi Team,   I have an application server on F5 LTM. The web server has two nodes in it pool. The VIP address on the Virtual server is 10.x.x.xxx, while each of the node also has IP addresses in sam...
application delivery
BIG-IP
LTM
youssef1's avatar
youssef1
Icon for Cumulonimbus rankCumulonimbus
Oct 04, 2018

Hi,

 

Lee summed it up well, maybe your problem is not clear.

 

In fact, we will resume everything step by step and if there is a step that you do not understand let me know:

 

you have your internal VIP with IP: 10.10.10.100

 

You have your IP public 195.10.10.100 that Nat destination traffic to your VIP (10.10.10.100)

 

  • The client enter the DNS query on his browser app.domain.com (dns resolve to 195.10.10.100)
  • the client query reach the FW on the IP 195.10.10.100
  • FW nat client query (Destination) to 10.10.10.100
  • F5 Process query and FW traffic to your node.
  • F5 process a snat in order to avoid asymetric traffic, in order that respons go back from F5
  • F5 FW traffic to the node with F5 IP (source nat: snat_automap)

The response go back using the same path.

 

let me know if something is not clear.

 

regards.