Source NAT on One Arm Config ACE

[Bilal Nawaz]

Hello,

In a one arm load-balancing configuration setup is it necessary to use source nat? or does the LB know what NAT needs to take place? It has knowledge that its in a one arm config as seen below (from the gui of the ACE)

Take an example for instance client is 172.25.25.40 the gateway is 172.25.25.1

The VIP on the LB is 172.25.24.123 and the client contacts the VIP.

Logically looks like this....

We're not using ipv6 however the highlight is shown below where reference to source NAT on the LB

Thank you

Bilal

[miguel.desantiago]

The NAT that is occuring is a destination NAT you could say.  When a request is made from an Outside Global address to a Inside Global address the ACE will take that Inside Global address and NAT it to an Inside Local address, say an internal servers IP address.  I believe the ACE also acts as a Reverse Proxy for external requests, meaning the ACE contacts the load balanced servers on behalf of the client.  That way external requests are not actually touching your servers.