For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ozdemircili_696's avatar
ozdemircili_696
Icon for Nimbostratus rankNimbostratus
Jun 10, 2010

F5 Source address

Hi, Is it possible F5 to pass the source address to nodes? I am administering Big IP F5 and I have 2 weblogic behind. When a client send a request to address of our F5 device, F5 changes the sourc...
management
monitoring
Michael_Yates's avatar
Michael_Yates
Icon for Nimbostratus rankNimbostratus
Jun 10, 2010
Yes. You can do that make sure that the Client IP Address is passed to the Destination Servers.

 

 

Your options are:

 

Don't use SNAT'ing - If the Weblogic Serves live on a subnet owned by the F5 LTM, then SNAT'ing is not necessary and can be Disabled so that the Source Client IP Address is passed through.

 

 

Use X-Forward - If you must use SNAT'ing due to your network configuration then you can create a custom (I'm not sure if it exists by default) HTTP Profile with X-Forward Enabled.

 

 

X-Forward:

 

Specifies, when enabled, that the system inserts an XForwarded For header in an HTTP request with the client IP address, to use with connection pooling.

 

 

If you use this then you will enable an option in your Weblogic Console to read the Client IP Address from the X-Forward Header. See this post for additional information:

 

http://devcentral.f5.com/weblogs/Joe/archive/2008/05/16/the-networking-abcs---x-is-for-x-forwarded-for.aspx