Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Mostafa_Elsayed's avatar
Jun 20, 2021

sys db snat.hosttraffic

anyone can explain the below command

 

tmsh modify sys db snat.hosttraffic value enable

1 Reply

  • When the host (including bigd) generates traffic, it uses the host (linux) route table to pick the appropriate src IP address for the destination IP. If that src IP address is a tmm self-IP, then the packet is passed into tmm.

     

    If tmm has a different view of the route to the destination IP (due to dynamic routing information, or different routing metrics when there are multiple possible routes), then the selected src IP may not be optimal, or may even fail to reach the destination.

     

    When snat.hosttraffic is enabled, tmm can look at the host-sourced traffic, and then SNAT the src IP to the best src IP (which can change the egress vlan) based on the tmm routing table, and ignore the original host src IP as determined by the host routing table.