Forum Discussion

Nimbostratus

Mar 20, 2019

Preserving Source IP without SSL Offload and Route Back via F5 LTMs

Hi,

I need to preserve source IP of the client but at the same time don't want to do SSL Offloading on F5 LTMs. Also, can't disable SNAT and the routing is not via F5's.

Is there any other way of preserving source IP??

application delivery

BIG-IP

LTM

Lee_Sutcliffe
Nacreous
Mar 20, 2019
If routing is not via F5, yet you need traffic to return to F5, then using SNAT is your only option.

You can use an X-Forwarded-For header to capture the client IP before SNAT which can be interperated by your webservers

https://support.f5.com/csp/article/K4816