For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Carlande_Desarm's avatar
Carlande_Desarm
Icon for Nimbostratus rankNimbostratus
Jan 26, 2018

VS vs NFS / NAT vs SNAT

Hello all,   anyone has a comment when it comes to NFVS vs VS? what is the precedence order for VS, NAT, SNAT, NFVS please?   Also, somewhere in the documentations it is said that SNAT is pref...
application delivery
BIG-IP
LTM
Chris_Grant's avatar
Chris_Grant
Icon for Employee rankEmployee
Jan 26, 2018

I would point out that the second link is an official F5 Solution article, and while they are occasionally wrong, it is very unusual. The first link is someone's best estimate, which is awesome, but not official. The KB article is correct:

 

Virtual Servers trump NATs. More specific Virtual Servers trump less specific virtual servers: 10.10.10.1:80 trumps 10.10.10.1:* NAT trumps SNAT More specific SNAT trumps less specific SNAT

 

So from first to last:

 

Virtual Servers (Specific) -> Virtual Server (General) -> NAT -> SNAT (Specific) -> SNAT (General)