F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

spurushothaman_'s avatar
spurushothaman_
Icon for Nimbostratus rankNimbostratus
Apr 25, 2016

Client/Source IP is not passed to downstream application

I have VIP in F5 SNAT with x-forward enabled - but SSL is terminated at the backend. We have http profile is set none to make the client mutual authentication to work along with SSL.   How do I...
BIG-IP
devops
iRules
Minn_62043's avatar
Minn_62043
Icon for Cirrostratus rankCirrostratus
Apr 25, 2016

If SSL is terminated at the backend server, BIG-IP will not be able to see the HTTP headers inside the SSL traffic and cannot add the XFF header.

 

You can only use the routed-mode, where SNAT is removed and backend servers use BIG-IP as the gateway for the incoming traffic.