For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Santosh_Kumar_2's avatar
Santosh_Kumar_2
Icon for Nimbostratus rankNimbostratus
Apr 06, 2017

Get Source IP for HTTPS traffic

Hi All,   I'm aware that XFF is a setting to get the Client IP for HTTP traffic. My server team needs to get the Client IP for HTTPS traffic. We've the client SSL set on the F5. As per my research...
application delivery
BIG-IP
LTM
security
Ed_Summers's avatar
Ed_Summers
Icon for Nimbostratus rankNimbostratus
Apr 06, 2017

Regardless of whether BIGIP accepts unencrypted traffic or off-loads SSL for a server, it can insert X-Forwarded-For for either one. See K4816 for more info. Also note that this KB article clarifies that BIGIP simply appends an XFF header regardless of whether or not one was already present. This may not be a concern in your environment, just something to be aware of.