SNAT pool port exhaustion - to iRule or not to iRule?

Hi Will,

 

 

I'm not sure SOL11135 is relevant if you're using a standard IP virtual server without connection mirroring. I thought LTM would round robin between the addresses in a SNAT pool. If you're seeing port exhaustion errors for one SNAT IP and not the other, I'd open a case with F5 Support on this.

 

 

You could also tailor the idle timeout on a custom TCP profile and add that to the virtual server. Per SOL7606, the lower of the idle timeouts on the TCP profile and the SNAT timeout will be honored:

 

 

SOL7606: Overview of BIG-IP idle session timeouts

 

http://support.f5.com/kb/en-us/solutions/public/7000/600/sol7606.html

 

 

Aaron