Get ClientIP Address Behind LoadBalancer

Hi Kevin,

 

 

I have checked with the Network team who deals with the F5 configuration details and they have provided the below response,

 

 

In answer to your question about ‘Insert X-Forwarded For’ feature, this configuration is relevant if SNAT is used in VIP configuration. SNAT feature is not in used (not required) in the existing configuration, SNAT is required if the sever gateway is not the F5 (for these application severs the gateway is F5). SNAT modifies the source IP of the packets that are sent to the pool members so that the return traffic is sent to the F5, and not directly to the user/client that initiated the request.

 

When the F5 system translates the source IP address of the incoming packet from the client to the SNAT address, the web server sees the request as originating from the SNAT address, not the original client IP address. If the web servers are required to log the original client IP address for requests, the SNAT address translation behavior can become problematic.

 

This is where ‘Insert X-Forwarded For’ comes in. I hope this clarify your query.

 

 

 

Please could you advice if there anything to resolve this issue?

 

 

Many Thanks and Regards,

 

Aniket