Forum Discussion

1qaz's avatar
1qaz
Icon for Nimbostratus rankNimbostratus
Jun 05, 2020

a problem about get source address through X-forward-for

I have a question, my VS is useing snat, with X-forward-for in http_profile, but I see some source addresses are not obtained? I also noticed that all the lost source addresses are okhttp,why? Thank...
application delivery
BIG-IP
LTM
Sachin-Garg's avatar
Sachin-Garg
Icon for Altostratus rankAltostratus

Here I could see that your another VIP 134.175.22.206:9091 The client original address is visible to the backend pool member

 

1st column is same to 3rd column

 

106.19.21.235:56092  134.175.22.206:9091  106.19.21.235:56092  134.176.1.227:9091   tcp  48  (tmm: 3) none

 

In that case your pool member 134.176.1.227:9091 will response directly to the Client IP 106.19.21.235:56092 bypassing F5 load balancer , are you seeing any asymmetric routing issue on this VIPs

1qaz's avatar
1qaz
Icon for Nimbostratus rankNimbostratus
Jun 05, 2020

thanks,

VIP 134.175.22.206:9091 don't use SNAT，no automap