For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Vova_1985_18320's avatar
Vova_1985_18320
Icon for Nimbostratus rankNimbostratus
Aug 18, 2015

Preserver client IP

Hi dear experts,   I looking for a way to preserver clients IP for TCP request (no http profile used) using SNAT. I read in some blogs that it possible to do it with iRule, but people talking abou...
management
Hamish's avatar
Hamish
Icon for Cirrocumulus rankCirrocumulus
Aug 18, 2015

Do you want to preserve it in the actual tcp connection (i.e. not SNAT'ed) or just encode it somewhere in the packet (e.g. option stuffing)?

 

SNAT won't preserve the address... It HIDES it... The S==Source - i.e. Source NAT'ing...

 

If you want the tcp connection to preserve it. Just don't use SNAT and make sure the route back to the client form the server passes back THROUGH the big again. For option stuffing there's an example in the Wiki...

 

H