Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

superd_88943's avatar
superd_88943
Icon for Nimbostratus rankNimbostratus
11 years ago

Address translation query

Guys,   Im trying to understand what exactly happens when address translation is enabled on a VIP. I assumed once enabled it was reading settings from the address translation section on the GUI (N...
superd_88943's avatar
superd_88943
Icon for Nimbostratus rankNimbostratus
11 years ago

hi nathan..

 

i dont want address translation, its working fine as is... its basically a VS with two proxy servers in the pool, and the proxy servers obviously need to see source IP address for policies, reporting etc.

 

What im confused on is how the traffic is getting back through the F5 without auotmap..

 

Im wondering without automap, does the F5 on the server side connection use the client address to talk to servers, thats kind of what im seeing in TCPDUMPs i.e. client source IP address on both sides of the connection.

 

Obviously that will explain my concerns...

 

Thanks again!!

 

nathe's avatar
nathe
Icon for Cirrocumulus rankCirrocumulus
11 years ago
yes it uses the client's source IP address. if the proxy servers' default gateway isnt the big-ip but you need to see client's source ip address could you SNAT and then amend the http profile to insert x-forwarded-for header? the proxy would need to be able to interrogate this header though. this would insert a value of the client's source IP address