101 · Question #344
What is NOT a benefit of using a SNAT?
The correct answer is D. Higher performance than other configuration. SNAT on F5 BIG-IP introduces additional address translation overhead, which reduces rather than improves performance compared to other deployment configurations.
Question
What is NOT a benefit of using a SNAT?
Options
- AASM can be deployed easily
- BNo changes are needed on the servers
- CFail open is easy to add
- DHigher performance than other configuration
How the community answered
(50 responses)- A8% (4)
- B2% (1)
- C6% (3)
- D84% (42)
Why each option
SNAT on F5 BIG-IP introduces additional address translation overhead, which reduces rather than improves performance compared to other deployment configurations.
SNAT simplifies ASM deployment by ensuring all return traffic passes back through the BIG-IP, satisfying the requirement for the device to see both directions of traffic - this is a genuine benefit.
With SNAT, servers see traffic originating from the BIG-IP SNAT address rather than individual client IPs, so no routing changes or default gateway updates are required on the backend servers - this is a genuine benefit.
Because SNAT hides the real client IPs and controls the traffic path, configuring a fail-open bypass is straightforward, making it easier to implement compared to other topologies - this is a genuine benefit.
SNAT requires the BIG-IP to translate the source IP address of every client request to a SNAT pool address before forwarding to the server, adding processing overhead. This makes SNAT a lower-performance option relative to configurations like direct server return or transparent proxy modes, so 'higher performance' is not an accurate benefit.
Concept tested: F5 BIG-IP SNAT deployment benefits and limitations
Source: https://techdocs.f5.com/en-us/bigip-15-1-0/big-ip-local-traffic-management-addressing-and-translation/about-secure-network-address-translation.html
Topics
Community Discussion
No community discussion yet for this question.