For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Danish202_17040's avatar
Danish202_17040
Icon for Nimbostratus rankNimbostratus
Dec 04, 2014

How to capture source IP address(clientIP) on F5 LTM .

Hi All ,   Is there any way to check clients IP(Source addresses) who is accessing F5 virtual server . I need to check clients IP(Source addresses) and confirm to my customer that they accessed o...
Sheigh_65772's avatar
Sheigh_65772
Icon for Cirrus rankCirrus
Dec 04, 2014

So the purpose of the x-forwarded-for feature is to give your backend servers the clients IP as with a NAT the connection will look to originating from the bigips IP. That isn't enough though, the backend server needs to know what to do with the additional header information.

 

This link has some info on the x-forwarded-for along with instructions near the bottom on how to get it working with IIS. What the plugin does is take the added header and uses that for the logs in place of the client address as normally. How this is done will depend on your flavor of webserver.

 

https://support.f5.com/kb/en-us/solutions/public/4000/800/sol4816.html