For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Vikky_193911's avatar
Vikky_193911
Icon for Altostratus rankAltostratus
Mar 20, 2019

SNAT vs Inline in high performance scenario

We are thinking about moving from SNAT to Inline Source Address Translation (we can control default gateway of the pool nodes either way) due port exhaustion and "general" feeling that this is much f...
application delivery
BIG-IP
inline
ip address exhaustion
LTM
snat
Vijay_E's avatar
Vijay_E
Icon for Cirrus rankCirrus
Mar 21, 2019

I think there are profile values that can insert XFF header instead of iRule. Depending on your network design, you can have selective SNAT, where SNAT can be enabled for specific client IP addresses and not for all.