For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

1qaz's avatar
1qaz
Icon for Nimbostratus rankNimbostratus
Jun 05, 2020

a problem about get source address through X-forward-for

I have a question, my VS is useing snat, with X-forward-for in http_profile, but I see some source addresses are not obtained? I also noticed that all the lost source addresses are okhttp,why? Thank...
application delivery
BIG-IP
LTM
Sachin-Garg's avatar
Sachin-Garg
Icon for Altostratus rankAltostratus
Jun 05, 2020

Here I could see that your another VIP 134.175.22.206:9091 The client original address is visible to the backend pool member

 

1st column is same to 3rd column

 

106.19.21.235:56092  134.175.22.206:9091  106.19.21.235:56092  134.176.1.227:9091   tcp  48  (tmm: 3) none

 

In that case your pool member 134.176.1.227:9091 will response directly to the Client IP 106.19.21.235:56092 bypassing F5 load balancer , are you seeing any asymmetric routing issue on this VIPs

  • 1qaz's avatar
    1qaz
    Icon for Nimbostratus rankNimbostratus
    Jun 05, 2020

    thanks,

    VIP 134.175.22.206:9091 don't use SNAT，no automap