09-24-2012 02:08 PM - edited 03-07-2019 09:04 AM
Hello,
Id be grateful if someone could explain why NAT is required on an ACE LB. I've been reading, but still dont quite understand. Is it NAT for the clients or the Server
thank you
Solved! Go to Solution.
09-25-2012 02:41 AM
The NAT pool can be any set of IP addresses. The key thing to understand is that the NAT pool must be routed to the LB. It doesn't matter whether it is part of the interface range or a separate pool altogether, you are simply forcing traffic back to the LB as the LB is not inline to the traffic flow.
As long as that NAT range is routed to the LB it will work fine.
Jon
09-24-2012 02:49 PM
The ACE supports both NAT for the client and the server. In general, NAT is not a needed function for the load-balancer. But in some designs NAT can help you to control the traffic-flow. One scenario is where you have more than one load-balancer and you need to make sure that the return-traffic comes back to the right LB. There client-NAT can solve that problem.
And don't be confused with the virtual IP. If you look at the packets in front and behind the LB, it seems like the LB does NAT. But in the ACE that function is not the NAT-config.
--
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni
09-25-2012 01:54 AM
How does it come in to play with a one arm configuration? I understand what the NAT does, but does the NAT pool have to be specifically an IP on an interface? I took a look at other peoples config and the NAT pool seems to have addresses that doesn't even live on the load balancer. Is it just any address that the client or server can respond to? and if so why is it not NAT'ed as the source being one of its own IP's?
09-25-2012 02:41 AM
The NAT pool can be any set of IP addresses. The key thing to understand is that the NAT pool must be routed to the LB. It doesn't matter whether it is part of the interface range or a separate pool altogether, you are simply forcing traffic back to the LB as the LB is not inline to the traffic flow.
As long as that NAT range is routed to the LB it will work fine.
Jon
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide