Forum Discussion
spurushothaman_
Nimbostratus
NimbostratusClient/Source IP is not passed to downstream application
I have VIP in F5 SNAT with x-forward enabled - but SSL is terminated at the backend. We have http profile is set none to make the client mutual authentication to work along with SSL.
How do I...
Ryannnnnnnnn
Altocumulus
AltocumulusI guess it depends on how you've designed your environment, but at a minimum you need to allow the BIG-IP to be able to see "inside" the encrypted traffic. You can do this by either SSL offloading or SSL bridging, you can then enable a http profile with the insert x-forwarded-for option enabled.
spurushothaman_SSL bridging is deprecated because of the security vulnerability.- RyannnnnnnnnWhat vulnerability, can you elaborate please?
