Forum Discussion

Mudassar's avatar
Mudassar
Icon for Altostratus rankAltostratus
Aug 20, 2021

Can we pass client actual ip for non http traffic?

We have f5 in dual arm. SNAT is being used. If I use iRule to extract client ip address at the time of connection, will it work? Or is there any other way to pass client actual ip to backend?

application delivery
BIG-IP
iRules
security
  • Yiğit_Uslu's avatar
    Yiğit_Uslu
    Icon for Cirrus rankCirrus
    Aug 22, 2021

    Hi Mudassar,

     

    Unfortunately iRule won't work. You are able to get the client IP but you only can add it to a header information.

    • Mudassar's avatar
      Mudassar
      Icon for Altostratus rankAltostratus
      Aug 22, 2021

      Hello,

       

      thanks for the reply. You means to say that we can’t pass it to backend servers? Only f5 will have those ips?

      • Yiğit_Uslu's avatar
        Yiğit_Uslu
        Icon for Cirrus rankCirrus
        Aug 22, 2021

        Yes, If you need to see real IP on this scenario, set your server's default gateway to F5 floating IP address and disable SNAT.