For one-armed topologies, when a packet (request) is received by the ESG, two actions are taken, which are as follows:
- Perform a DNAT translation to replace the VIP of the Load Balancer with a server in the pool
- Perform an SNAT translation to replace the client IP address with that of the Load Balancers
Because NAT is required the firewall must also be enabled on the Edge Load Balancer.
In this recipe, we also configured a layer 4 Load Balancer and not layer 7; layer 4 is preferred if you require higher performance. To configure an L4 Load Balancer as seen in this recipe, it is imperative no layer 7 parameters are chosen, otherwise the load balancing engine will default to layer 7. You can verify which load balancing engine ...
