For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

InquisitiveMai's avatar
InquisitiveMai
Icon for Cirrostratus rankCirrostratus
Aug 13, 2024

Identify original client ip address for a VIP with only TCP profile

Without disabling SNAT/ Automap,The pool member needs to know the original client address. How can we achieve it? Is there any policy we can apply on the VIP 
application delivery
Mayur_Sutare's avatar
Mayur_Sutare
Icon for MVP rankMVP
Aug 16, 2024

Configuring the F5 to insert into the TCP header of a connection can be a complicated implementation. So better way is to change the configuration where you can easily achieve the requirement. 

 

  1. Have HTTP profile configured and enable XFF
  2. Disable SNAT on the vServer and set gateways of backend servers to F5.

 

Hope it helps!