How can I preserve the original HTTP Host Header to the Backendservers?

Hi guys,

 

I'm trying the following configuration to loadbalance a RH SSO Key cloack Cluster:

 

clientIP -> https/443 -> (clientssl-Profile) F5-Virtual Server (serverssl-Profile) -> SNAT-IP -> tcp8443 -> Backendserver

 

The Backendserver need to see the original client http Header, so I created a http Profile with the "Insert X-Forwarded-For"-Option enabled.

 

Alternative I tried the following iRule:

 

when HTTP_REQUEST { HTTP::header insert X-Forwarded-For [IP::client_addr] }

 

Unfortunaly, both ways didn't work properly... How can I preserve the whole original HTTP Host Header trough the F5 to the Backendservers?

 

Thank you!