Forum Discussion

Mudassar's avatar
Mudassar
Icon for Altostratus rankAltostratus
Aug 20, 2021

Can we pass client actual ip for non http traffic?

We have f5 in dual arm. SNAT is being used. If I use iRule to extract client ip address at the time of connection, will it work? Or is there any other way to pass client actual ip to backend?
application delivery
BIG-IP
iRules
security
Yiğit_Uslu's avatar
Yiğit_Uslu
Icon for Cirrus rankCirrus
Aug 22, 2021

Hi Mudassar,

 

Unfortunately iRule won't work. You are able to get the client IP but you only can add it to a header information.

  • Mudassar's avatar
    Mudassar
    Icon for Altostratus rankAltostratus
    Aug 22, 2021

    Hello,

     

    thanks for the reply. You means to say that we can’t pass it to backend servers? Only f5 will have those ips?

    • Yiğit_Uslu's avatar
      Yiğit_Uslu
      Icon for Cirrus rankCirrus
      Aug 22, 2021

      Yes, If you need to see real IP on this scenario, set your server's default gateway to F5 floating IP address and disable SNAT.