Forum Discussion

1qaz's avatar
1qaz
Icon for Nimbostratus rankNimbostratus
Jun 05, 2020

a problem about get source address through X-forward-for

I have a question, my VS is useing snat, with X-forward-for in http_profile, but I see some source addresses are not obtained? I also noticed that all the lost source addresses are okhttp,why? Thank...
application delivery
BIG-IP
LTM
Sachin-Garg's avatar
Sachin-Garg
Icon for Altostratus rankAltostratus
Jun 05, 2020
  1. You said , you are suing SNAT but i can see its Automap(which will use the self ip of your internal interface to source nat the source IP address), you can also use any static IP instead of Automap in case you want to use that IP to be used for SNAT Purpose. Just in case but this one also ok if it is not causing any issue,
  2.  
  3. Can you please share the details of your http profile by running following commands in tmsh mode
  4.  
  5. list ltm profile http http_yuanIP details
  6.  
  7. for checking the connection details on your VIP
  8.  
  9. show sys connection | grep 134.175.22.206

 

 

Best Regards

 

Sachin Garg

  • 1qaz's avatar
    1qaz
    Icon for Nimbostratus rankNimbostratus
    Jun 05, 2020

    thanks,I noticed that only okhttp has no source address, but okhttp does not always appear

     

    list ltm profile http http_yuanIP 

    ltm profile http http_yuanIP {

      app-service none

      defaults-from http

      insert-xforwarded-for enabled

     

    show sys connection | grep 134.175.22.206

    106.19.5.121:50700   134.175.22.206:9091  106.19.5.121:50700   134.176.1.228:9091  tcp  63  (tmm: 3) none

    106.16.132.94:41796  134.175.22.206:9091  106.16.132.94:41796  134.176.1.228:9091  tcp  38  (tmm: 3) none

    106.18.147.4:12642   134.175.22.206:9080  134.176.1.196:16260  134.176.1.225:9090  tcp  58  (tmm: 2) none

    106.17.200.187:30317  134.175.22.206:9080  134.176.1.196:49075  134.176.1.226:9090   tcp  64  (tmm: 1) none

    223.150.23.248:15461  134.175.22.206:9080  134.176.1.196:58407  134.176.1.226:9090   tcp  92  (tmm: 1) none

    106.19.3.31:15369   134.175.22.206:9080  134.176.1.196:35483  134.176.1.226:9090   tcp  137  (tmm: 1) none

    220.202.118.3:21709  134.175.22.206:9080  134.176.1.196:60991  134.176.1.225:9090   tcp  250  (tmm: 1) none

    106.16.162.55:51031  134.175.22.206:9091  106.16.162.55:51031  134.176.1.227:9091   tcp 31  (tmm: 0) none

    106.16.156.197:62938  134.175.22.206:9080  134.176.1.196:54220  134.176.1.225:9090  tcp  35  (tmm: 2) none

    58.45.29.238:26466   134.175.22.206:9080  134.176.1.196:24216  134.176.1.226:9090  tcp  284  (tmm: 2) none

    106.16.150.173:43584  134.175.22.206:9091  106.16.150.173:43584  134.176.1.227:9091   tcp  11  (tmm: 3) none

    106.19.21.235:56092  134.175.22.206:9091  106.19.21.235:56092  134.176.1.227:9091   tcp  48  (tmm: 3) none

    223.152.95.189:37259  134.175.22.206:9080  134.176.1.196:29241  134.176.1.225:9090   tcp  67  (tmm: 3) none

    118.251.19.94:49046  134.175.22.206:9091  118.251.19.94:49046  134.176.1.227:9091  tcp  55  (tmm: 1) none