Forum Discussion
sanzinc
Nimbostratus
Feb 27, 2024LTM | Preserve Client IP Address in L3 Mode
TLDR; Is there any way to 'preserve original client source IP address' in the packets sent from LTM to the realserver? I am currently using a non-F5 SLB solution, looking to migrate to F5 LTM. But...
zamroni777
MVP
Feb 27, 2024what is the applicaton layer of the service?
if it is http/s based, then with f5 snat enabled, f5 can put the client ip in XFF header and then webservers usually can read client ip address from that XFF header.
if not http/s, then check whether if it's possible to add routing entries in webserver: f5 server side self ip as router for traffic to specific source subnets.
if yes, then you can safely configure with f5 snat disabled.
basically, f5 prefers client requests and server responses go through f5.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects
