To allow only the return traffic to be redirected to the service node when the load balancer does not

perform source NAT, we need to configure a Policy-Based Redirect (PBR). Here’s how it can be

achieved:

Create a Contract:

Create a contract linked to the common/default filter. This contract will define the communication

rules between the client endpoint and the server endpoint.

Configure L4-L7 Device:

Create an L4-L7 device with the function type set to “GoThrough.” This device will be used to redirect

traffic to the service node.

Create a Policy-Based Redirect Policy:

Set up a Policy-Based Redirect (PBR) policy.

Specify the L3 Destination as the load balancer’s inside IP/MAC address.

Ensure that the L4-L7 Policy-Based Redirect Policy has the “GoThrough” function type.

Create a Service Graph Template:

Define a service graph template that

the previously created contract and L4-L7 device.

Apply the service graph template to the relevant connectors.

Connector Configuration:

On the consumer connector, reference the L4-L7 Policy-Based Redirect Policy.

On the provider connector, also reference the L4-L7 Policy-Based Redirect Policy.

By following this configuration, only the return traffic (from the server to the client) will be redirected

to the service node, ensuring proper load balancing and traffic management.

Reference:

Implementing Cisco Application Centric Infrastructure Official Cert Guide