For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jeff_Wise's avatar
Jeff_Wise
Icon for Nimbostratus rankNimbostratus
Feb 25, 2019

Persistence

HTTPS requests coming from the Internet hit a VIP on Reverse proxy F5, then get forwarded to internal F5 LB VIP via HTTP. Then Internal F5 makes a load balancing decision and encrypts traffic and...
application delivery
BIG-IP
Dylan_375544's avatar
Dylan_375544
Icon for Cirrocumulus rankCirrocumulus
Feb 25, 2019

Well, on your RP, you could add the X-Forwarded-For header, and pull the original Client IP address from that.

 

HERE is some info on that.

 

Hope that helps! If it does please up-vote and select this answer, it'd be greatly appreciated!

 

-Dylan

 

  • Jeff_Wise's avatar
    Jeff_Wise
    Icon for Nimbostratus rankNimbostratus
    Feb 25, 2019

    I see configuring X-Forwarded on the RP inserts the clients original IP address in header. Now how do you configure the LB on the inside F5 to look for that field in the header and apply some sort of stickiness before sending to real server in pool.

     

  • Dylan_375544's avatar
    Dylan_375544
    Icon for Cirrocumulus rankCirrocumulus
    Feb 25, 2019

    For that you could use Universal Persistence in an iRule.

     

    HERE is some info on that! (:

     

    Once again, hope that helps! If it does please up-vote and select this answer, it'd be greatly appreciated!

     

    -Dylan