Forum Discussion
Persistence
HTTPS requests coming from the Internet hit a VIP on Reverse proxy F5, then get forwarded to internal F5 LB VIP via HTTP. Then Internal F5 makes a load balancing decision and encrypts traffic and forwards to real server in pool.
Problem, RP snats request before sending request to Internal F5 VIP, so all requests will be coming from one IP.
What is the best method to always send a user to the same real server.
- Dylan_375544
Cirrocumulus
Well, on your RP, you could add the X-Forwarded-For header, and pull the original Client IP address from that.
HERE is some info on that.
Hope that helps! If it does please up-vote and select this answer, it'd be greatly appreciated!
-Dylan
- Jeff_Wise
Nimbostratus
I see configuring X-Forwarded on the RP inserts the clients original IP address in header. Now how do you configure the LB on the inside F5 to look for that field in the header and apply some sort of stickiness before sending to real server in pool.
- Dylan_375544
Cirrocumulus
For that you could use Universal Persistence in an iRule.
HERE is some info on that! (:
Once again, hope that helps! If it does please up-vote and select this answer, it'd be greatly appreciated!
-Dylan
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com