For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

sathish_2826's avatar
sathish_2826
Icon for Nimbostratus rankNimbostratus
May 30, 2016

Source address persistance

Hello All,

 

I just wanted to know the basic functionality of source Address persistence..

 

I know it directs the sessions to same server solely based on source IP address of the packet, if we have SNAT option enabled, then which one will be 1st in order, will it change the original source to F5 ip (because of SNAT) then directs the session based on that F5 ip..

 

If not, suppose the sessions are directed to same server based on original client ip, then how it varies from cookie persistence, since a cookie will be stored on client's machine and using that they will be redirected to same server..

 

Please someone clarify..

 

application delivery
BIG-IP

1 Reply

  • Yann_Desmarest's avatar
    Yann_Desmarest
    Icon for Cirrus rankCirrus
    May 30, 2016

    Hi,

     

    Source addr persistence persist based on the client ip of the incoming packet.

     

    In an HA deployment of your bigips, you will need to mirror the persistence table from one device to the other to keep persistence info when there is a failover.

     

    With cookie insert persistence, a cookie is inserted in the response to the client and it works for http/https only. You don't need to mirror this persistence as the entire information is retain in the cookie value. I suggest to actovate the cookie encryption option to avoid backend guessing through cookie value decoding