Forum Discussion
spurushothaman_
Nimbostratus
NimbostratusClient/Source IP is not passed to downstream application
I have VIP in F5 SNAT with x-forward enabled - but SSL is terminated at the backend. We have http profile is set none to make the client mutual authentication to work along with SSL.
How do I...
Ryan_80361
Cirrostratus
CirrostratusI guess it depends on how you've designed your environment, but at a minimum you need to allow the BIG-IP to be able to see "inside" the encrypted traffic. You can do this by either SSL offloading or SSL bridging, you can then enable a http profile with the insert x-forwarded-for option enabled.
spurushothaman_Nimbostratus
NimbostratusSSL bridging is deprecated because of the security vulnerability.
