Forum Discussion
superd_88943
Nimbostratus
NimbostratusAddress translation query
Guys,
Im trying to understand what exactly happens when address translation is enabled on a VIP. I assumed once enabled it was reading settings from the address translation section on the GUI (N...
superd_88943Nimbostratus
Nimbostratushi nathan..
i dont want address translation, its working fine as is... its basically a VS with two proxy servers in the pool, and the proxy servers obviously need to see source IP address for policies, reporting etc.
What im confused on is how the traffic is getting back through the F5 without auotmap..
Im wondering without automap, does the F5 on the server side connection use the client address to talk to servers, thats kind of what im seeing in TCPDUMPs i.e. client source IP address on both sides of the connection.
Obviously that will explain my concerns...
Thanks again!!
nathe
Cirrocumulus
Cirrocumulusyes it uses the client's source IP address. if the proxy servers' default gateway isnt the big-ip but you need to see client's source ip address could you SNAT and then amend the http profile to insert x-forwarded-for header? the proxy would need to be able to interrogate this header though. this would insert a value of the client's source IP address