Forum Discussion

1qaz's avatar
1qaz
Icon for Nimbostratus rankNimbostratus
Jun 05, 2020

a problem about get source address through X-forward-for

I have a question, my VS is useing snat, with X-forward-for in http_profile, but I see some source addresses are not obtained? I also noticed that all the lost source addresses are okhttp,why? Thank...
application delivery
BIG-IP
LTM
Sachin-Garg's avatar
Sachin-Garg
Icon for Altostratus rankAltostratus
Jun 05, 2020

As you can see the

 

1st Column = Real Source IP:port

2nd Column = VIP:port

 

3rd Column = SNAT Source IP:port using Self IP of Internal Interface

4th Column = Pool Member:port

 

Here I could see that your another VIP 134.175.22.206:9091 The client original address is visible to the backend pool member

 

1st column is same to 3rd column

 

106.19.21.235:56092  134.175.22.206:9091  106.19.21.235:56092  134.176.1.227:9091   tcp  48  (tmm: 3) none

 

But for the another VIP 134.175.22.206:9080 the 1st column IP is changing with your F5 Self IP of Internal Interface or SNAT IP 134.176.1.196 in the 3rd Column:

223.152.95.189:37259  134.175.22.206:9080  134.176.1.196:29241  134.176.1.225:9090   tcp  67  (tmm: 3) none

 

Can you please compare the 2 VIPs config and share:

 

VIP 134.175.22.206:9091 - Client IP address is visible to the pool member

VIP 134.175.22.206:9080 - Client IP address is NOT visible to the pool member