Forum Discussion

TaSM1_90432's avatar
TaSM1_90432
Icon for Nimbostratus rankNimbostratus
Apr 22, 2005

V9.0.4 SNAT, but maintain source IP of client

We have two groups of servers which are on the same network (L2 and L3). Is there a way to preserve the source IP of a request from group1 web servers to a vip on the same network of the two groups of servers, without the group2 servers sending return traffic directly back to the group1 webservers? I need to enable SNAT but want the group2 servers to retain the source IP address of the client servers.

 

 

Thank you.
application delivery
dev
devops
iRules
  • JRahm's avatar
    JRahm
    Icon for Admin rankAdmin
    Apr 25, 2005
    If it is http traffic, you can insert the source IP into the headers.
  • JRahm's avatar
    JRahm
    Icon for Admin rankAdmin
    Apr 25, 2005
    If it is not http traffic, you could separate your layer 2 domain into two vlans and then create a vlan group with your layer 3 domain defined there. Put each group of servers into each vlan, then destination nat the traffic, the BigIP will preserve the source and intercept the return traffic to correct the (now) source as the vip so the packet originator doesn't reset the TCP connection. I tested this in the lab a few years ago. You shouldn't need a rule for this.