Add X-Forwarded-For to websocket traffic

Question

Good day everyoneWe have websocket traffic which is load balanced by F5 and we would like to add X-Forwarded-For to it so we can have clients real IP in server.As I read about it the websocket traffic starts by http connection and the continues with websocket.I added HTTP profile (with XFF enabled) and all of our connections were dropping.Can anybody help me on this?Thanks

ismael_goncalves · Answer

Have you configured a websocket profile?https://support.f5.com/csp/article/K14754

folyq · Answer

No I haven't&nbsp;Should I add http profile (with XFF enabled) and websocket profile to Virtual Server?

ismael_goncalves · Answer

That's correct but also, if the traffic is encrypted , you also need to have Client SSL profile and Server SSL profile for the proper SSL decrypt/re-encrypt. Otherwise, BIG-IP will see only encrypted traffic.&nbsp;

folyq · Answer

Thanks IsmaelI will try it and get back to you.Also should I apply the http profile in the client side or server side?

ismael_goncalves · Answer

The HTTP profile does not have client/server sides context. Also, check here for TLS options you might want to configure:https://support.f5.com/csp/article/K65271370

Forum Discussion

Add X-Forwarded-For to websocket traffic

Recent Discussions

2k Reviews: Fairy Farms Hemp Australia – Check It Out Now!

SMTP Proxy irule

NJMC Configuration Issues on F5 Load Balancer

table lifetime command

Rewriting Location Header in iRule

Related Content

iRule for AFM IP Intelligence security policy to work with HTTP XFF (X-Forwarded-For) headers

Restricting Access to Virtual from client IP address in X-Forwarder-For HTTP header

Log X Forwarded For Http Header In Iis Dll

SNAT / X-FORWARD-FOR breaks HTTPS connection

fellow traffic