Forum Discussion
D__Charles_Shid
Jul 15, 2010Nimbostratus
Akamai, True-Client-IP, and fun with logging
Hi all!
This is my first post here, so please be gentle. I really did run searches for this, but kept coming up zero. My problem is this: my client is considering using Akamai to improve c...
hooleylist
Jul 15, 2010Cirrostratus
Hi Daniel,
You could translate the source address on serverside connections to the True-Client-IP header value. The web servers' default gateway would need to be the LTM floating self IP though for this to work. You wouldn't need to do any manual "untranslation" as long as LTM gets the response.
when HTTP_REQUEST {
Check if the True-Client-IP HTTP header has an IP address
if {not ([catch {IP::addr [HTTP::header True-Client-IP] mask 255.255.255.255}])}{
No error parsing the header as an IP address, so use it for SNATing
snat [HTTP::header True-Client-IP]
}
}
Aaron
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects