Which statement regarding SNAT is NOT true?

Question

Options

• ASNAT is enabled by default.
• BSNAT limits a Virtual Service to a maximum of 64k concurrent connections.
• CSNAT is required for connection multiplexing.
• DSNAT is required for scaling a Virtual Service across Service Engines.

• A
  3% (1)
• B
  17% (5)
• C
  70% (21)
• D
  10% (3)

Explanation

Option C is the incorrect statement because SNAT (Source NAT) is not required for connection multiplexing - multiplexing combines multiple client connections into fewer server-side connections at the application layer, and this can function regardless of whether the client's source IP is translated.

The other three statements are all true: (A) SNAT is indeed enabled by default on Virtual Services in Avi/NSX ALB; (B) because SNAT replaces client IPs with the Service Engine's IP, each SE-to-server pair is limited to ~64k ephemeral port combinations, capping concurrent connections; (D) SNAT is genuinely required when scaling across multiple Service Engines so that server return traffic is sent back through the correct SE rather than being routed asymmetrically past the load balancer.

Memory tip: Associate multiplexing with application-layer connection pooling - it doesn't care about IP addresses, so SNAT is irrelevant to it. A handy phrase: "Multiplex doesn't need a mask."

No community discussion yet for this question.