Forum Discussion
Will F5 single arm setup work without SNAT?
Yes it will work if you ensure that the response traffic returns through the LTM. If your pool members (server) utilize the LTM as their gateway, then the traffic will return through the LTM and should be processed successfully. (One caveat: Any clients that reside on the same subnet as your pool members will not work, as the pool member will respond directly to the client.)
If this is an HTTP virtual (or HTTPS but you can process traffic on the LTM unencrypted), you also have the option to provide the original client IP address in an 'X-Forwarded-For' header. This would allow you to enable SNAT if requried, while also providing 'real' client IPs to the pool member, albeit in application-layer data. See SOL4816 for more info on X-Forwarded-For.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
