For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

G_04_148588's avatar
G_04_148588
Icon for Nimbostratus rankNimbostratus
Mar 25, 2014

Load balance related quistion

Is it possible to identify which client has accessing the server after passing through f5 load balance? or in other words can the application servers know from which client does the request come?  
IheartF5_45022's avatar
IheartF5_45022
Icon for Nacreous rankNacreous
Mar 25, 2014

If the F5 is 'inline' - within the routing path between the client and server, then there is no reason the server would not see the real client address.

 

If however the F5 is not inline and you need to force server return traffic back to the F5 using a SNAT and you are talking about HTTP traffic, then you can insert an X-Forwarded-For header using the http profile. X-Forwarded-For will contain the original client source.

 

Patrik_Jonsson's avatar
Patrik_Jonsson
Icon for MVP rankMVP
Mar 25, 2014
Well said. Also good to know is that you will need a filter for IIS, configure Apache etc. to be able to log the header instead of the SNAT IP (if you use snat). /Patrik