Forum Discussion
Persistence profile - How will I use source address affinity based load balancing?
- Jun 11, 2016
Don't worry, it's a common scenario for me.
Just pay attention that the upstream proxy insert the "X-Forwarded-For" header, or maybe another one "True-Client-IP" or even "X-Client-IP".
If you are just nating using a firewall, I think that the header is not inserted.
I add this peace of code in the example :
set clientip [IP::client_addr]
because you may have situation where there is no "X-Forwarded-For" in the request, so that we can persist also in this scenario.
Don't worry, it's a common scenario for me.
Just pay attention that the upstream proxy insert the "X-Forwarded-For" header, or maybe another one "True-Client-IP" or even "X-Client-IP".
If you are just nating using a firewall, I think that the header is not inserted.
I add this peace of code in the example :
set clientip [IP::client_addr]
because you may have situation where there is no "X-Forwarded-For" in the request, so that we can persist also in this scenario.
- Sumanta_88744Jun 11, 2016CirrusHi Yann Thanks. I have noticed one thing that the XFF is present in all http sessions. So this should work for me. I'll try it on Monday and update you. Also, do I need to use One Connect as well? It is given in sol7392: Overview of universal persistence. Again, too complex. Regards, Sumanta.
- Vijay_EJun 11, 2016CirrusUse OneConnect for any L7 persistence. So, yes use it. https://network-maven.com/2014/10/12/f5-oneconnect/
- Sumanta_88744Jun 21, 2016CirrusHi All This is giving error while trying to change source based persistence to universal. 01070394:3: HTTP_REQUEST event in rule (/Common/iRule_xff) requires an associated HTTP or FASTHTTP profile on the virtual server (/Common/AFG_XCAP_VS).
- Yann_DesmarestJun 21, 2016CirrusHi, you need to apply an http profile in order to use HTTP events present in the irule
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com