Forum Discussion

meena_60183's avatar
meena_60183
Icon for Nimbostratus rankNimbostratus
Jun 13, 2011

Client IP visibility in one arm mode

Hi All,     I have a pair of LTMs in the DMZ in one arm configuration. The frontend (virtual server) and the backend (servers) are on the same subnet. It acts as a reverse proxy for a lot of int...
config
design
nathe's avatar
nathe
Icon for Cirrocumulus rankCirrocumulus
Jun 13, 2011
Meena

 

"The traffic that is being load balanced in not http(s) but SSH and TCP port 9033. it is application specific" - I think this rules out x-forward-for I'm afraid. In a one-arm config you could choose to NOT use SNAT Automap on this VIP, however, you will then need to route the traffic back to the src client ip back through the LTM, rather than the def gateway (which I presume isn't the LTM).

 

 

Rgds

 

N