Forum Discussion

xmcrexap_245551's avatar
xmcrexap_245551
Icon for Nimbostratus rankNimbostratus
Mar 24, 2017

Question concerning NAT and IP forwarding VS

Hello,

 

Actually the architecture is as following:

 

  • I have a VS_INTERNET in IP forwarding (source any, dest any).
  • I have different VS in IP forwarding with more specific configuration (for exemple some with specific source and other with specific service or profiles).

=> All of these IP forwarding VS have any in destination

 

  • I have some VS in IP public. Actually I have only one default gateway (in network route) going to the actual ISP.

In the futur I'll have two more ISP.

 

The goal is :

 

  • Send traffic from VS IP forwarding (other than VS_INTERNET) to the actual ISP:

=> No modification required.

 

  • Send traffic from VS_INTERNET to new ISP1 as master and other as backup:

=> For this I plan to modify the VS actually in IP forwarding to standard, create a pool with priority group activation to less than 1, the new ISP1 with the higher priority in order all the flow go to this ISP.

 

My question is the following. I have some NAT configured with internal IP (origin) NATted to IP public of actual ISP.

 

With my new implementation, these servers will first be natted with IP public of actual ISP and going through my VS_INTERNET but with IP of actual ISP. I think the best I to create new VS in IP forwarding with these IP natted as source. Is it the best solution?

 

Thank you very much Best regards,

 

1 Reply

  • If the source IPs that should use the 2nd ISP are different then you could create an additional VS and the more specific traffic would get matched. Otherwise you may need to implement an iRule to select a pool member(ISP) based on your source IPs.

     

    virtual server precedence: address:port -> address:* -> network:port -> network :* -> *:port :