For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ozdemircili_696's avatar
ozdemircili_696
Icon for Nimbostratus rankNimbostratus
Jun 10, 2010

F5 Source address

Hi, Is it possible F5 to pass the source address to nodes? I am administering Big IP F5 and I have 2 weblogic behind. When a client send a request to address of our F5 device, F5 changes the source address and puts his ip as the source.What we want is F5 to pass the ip of the client as the source. Thank you.
management
monitoring

1 Reply

  • Michael_Yates's avatar
    Michael_Yates
    Icon for Nimbostratus rankNimbostratus
    Jun 10, 2010
    Yes. You can do that make sure that the Client IP Address is passed to the Destination Servers.

     

     

    Your options are:

     

    Don't use SNAT'ing - If the Weblogic Serves live on a subnet owned by the F5 LTM, then SNAT'ing is not necessary and can be Disabled so that the Source Client IP Address is passed through.

     

     

    Use X-Forward - If you must use SNAT'ing due to your network configuration then you can create a custom (I'm not sure if it exists by default) HTTP Profile with X-Forward Enabled.

     

     

    X-Forward:

     

    Specifies, when enabled, that the system inserts an XForwarded For header in an HTTP request with the client IP address, to use with connection pooling.

     

     

    If you use this then you will enable an option in your Weblogic Console to read the Client IP Address from the X-Forward Header. See this post for additional information:

     

    http://devcentral.f5.com/weblogs/Joe/archive/2008/05/16/the-networking-abcs---x-is-for-x-forwarded-for.aspx