Forum Discussion
JRahm_128324
Historic F5 Account
client connection: external ip -> vip ip
server connection: BIG-IP self ip -> server ip
Adriano_Bezerra
Jan 30, 2019Altostratus
SNAT is for changing the SOURCE address. Without SNAT, packets from the client arriving at the VIP retain the client's true source address. SNAT is then important if the downstream server knows how to route back to that address directly (not back through the F5). SNAT will change the client source to an address controlled by the F5 to essentially force return traffic back through the proxy.