Forum Discussion

TaSM1_90432's avatar
TaSM1_90432
Icon for Nimbostratus rankNimbostratus
Apr 22, 2005

V9.0.4 SNAT, but maintain source IP of client

We have two groups of servers which are on the same network (L2 and L3). Is there a way to preserve the source IP of a request from group1 web servers to a vip on the same network of the two groups o...
application delivery
dev
devops
iRules
JRahm's avatar
JRahm
Icon for Admin rankAdmin
Apr 25, 2005
If it is not http traffic, you could separate your layer 2 domain into two vlans and then create a vlan group with your layer 3 domain defined there. Put each group of servers into each vlan, then destination nat the traffic, the BigIP will preserve the source and intercept the return traffic to correct the (now) source as the vip so the packet originator doesn't reset the TCP connection. I tested this in the lab a few years ago. You shouldn't need a rule for this.