For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

DavidWong_10382's avatar
DavidWong_10382
Icon for Nimbostratus rankNimbostratus
Nov 03, 2009

About SNAT

Hi Guys,     If SNAT is used, how to know the original client IP when F5 receives response from server and before sends response back to client? does someone happen to know it. Thanks. ...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Nov 03, 2009
Can you try IP::client_addr in CLIENT_ACCEPTED and compare that with IP::client_addr in the event you're trying to get the client IP address is? IP::client_addr is a synonym for clientside {IP::remote_addr} and should return the source IP address LTM received on the client to LTM connection. If it's not returning the IP address you're expecting it's either a bug or a case where you're expecting the wrong IP address.

 

 

If you run tcpdump on the external VLAN filtering on the VIP address, what do you see as the client IP address for the client you're testing from?

 

 

Thanks,

 

Aaron