Forum Discussion
JTucker_137331
Nimbostratus
NimbostratusView NAT / SNAT Sessions
Hi,
I have recently enabled an SNAT in an iRule:
switch -exact -- "1" [IP::addr [getfield [IP::client_addr] "%" "1"] equals 10.80.0.0/16] {
snat automap
}
and I am trying to work o...
JTucker_137331Nimbostratus
NimbostratusHi,
Been doing a little more digging on this subject "show sys conn" does show thousands of connections and I'm pretty sure that the figure of 15K above from
sho ltm virtual api_HTTP80 | grep Currentisn't the SNAT sessions because if I then carry out the same on a high traffic VS I get a figure of
sho ltm virtual ad_HTTP80 | grep Current
Current Connections 100.2K 0 -
And SNAT is definitely not enabled in any shape or form on that VS!
I have been playing about with "sho sys connection ss-server-addr 172.22.0.129%2" etc etc (previously was missing the route domain suffix, doh!) and that's now looking at bit more useful.
I think I will enable SNAT pool to test and see how many connections I get specifically on that IP see if that 15K that can be validated in some way.