Forum Discussion

KOR_124005

Nimbostratus

Mar 05, 2014

How to setup X-Forwarded-For HTTP header to preserve the original client IP address for traffic translated by a SNAT ?

Hi All, Hope you are fine.

please need you Help,

i have problem,

when i activate the google proxy is the IP of the proxy that replaces the customer address

i tested the proxy with external sites and client source IP is correctly entered in the XFF field.

i setup this configuration but i dont have standards value

http://support.f5.com/kb/en-us/solutions/public/4000/800/sol4816.html

how i can configure the VS to have the standards values ? • X-BIG-IP-IP-CALLING: xxxxxxxxx • X-FORWARD-FOR: xxxxxxxxx(IP Client), xx.xxx.xx.xxx (Proxy 1) xxx.xxx.xxx.xx (Proxy 2)

thank u in advance

nitass_89166
Noctilucent
Apr 22, 2014
have you added the logging to the irule? what did you get from the log?
- KOR_124005
  Nimbostratus
  Apr 22, 2014
  How i can find on /var/log/ltm Apr 22 04:43:46 tmm3 info tmm3[7976]: Rule /VAS/XFW_Log_Local : [HTTP::header Forwarded] Br,
- KOR_124005
  Nimbostratus
  Apr 22, 2014
  and that the iRule applied when HTTP_REQUEST { log local0. "\[HTTP::header Forwarded\] [HTTP::header Forwarded]" if { [scan [HTTP::header Forwarded] {for=%s} ip] == 1 } { HTTP::header remove X-forwarded-for HTTP::header insert X-forwarded-for $ip } }
nitass
Employee
Apr 22, 2014
Apr 22 04:43:46 tmm3 info tmm3[7976]: Rule /VAS/XFW_Log_Local : [HTTP::header Forwarded]

it seems no Forwarded header. is header name correct indeed?