For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Herman_Choi_360's avatar
Herman_Choi_360
Icon for Nimbostratus rankNimbostratus
Sep 27, 2007

SNAT for specific Virtual Servers

Hi,     I have multiple virtual servers on my Big-IP LTM. I also have a standard SNAT object which has a member list. I don't SNAT for all source IP addresses.     The standard SNAT obje...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Oct 15, 2008
hermanaccd,

 

 

You can use the snat (Click here) or snatpool (Click here) commands to apply snat for a specific connection. There are a few examples in the codeshare:

 

 

http://devcentral.f5.com/wiki/default.aspx/iRules/DestinationSnatUsingDNS.html

 

 

http://devcentral.f5.com/wiki/default.aspx/iRules/SelectiveSNAT.html

 

 

macroscape,

 

 

I think you still get partial PVA acceleration with a SNAT:

 

 

 

https://support.f5.com/etc/medialib/kb/pdfs.Par.17692.File.dat/sol4832_9.4-9.4.4.pdf

 

 

In Virtual Server UI acceleration values are displayed based on the configuration of the virtual server. For example, if you have a virtual server configured with Round Robin and a general SNAT, the b virtual show command displays the acceleration for the virtual as Full. However, in the In Packet Path column, the general SNAT has reduced the virtual server to Assist.

 

 

 

 

You can get more detail in SOL4832:

 

 

SOL4832: Overview of Packet Velocity ASIC (PVA) Acceleration features and sub features

 

(Click here)

 

 

Aaron