For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Amit_Bahl_12851's avatar
Amit_Bahl_12851
Icon for Nimbostratus rankNimbostratus
Mar 20, 2019

Preserving Source IP without SSL Offload and Route Back via F5 LTMs

Hi,   I need to preserve source IP of the client but at the same time don't want to do SSL Offloading on F5 LTMs. Also, can't disable SNAT and the routing is not via F5's.   Is there any other ...
application delivery
BIG-IP
LTM
Lee_Sutcliffe's avatar
Lee_Sutcliffe
Icon for Nacreous rankNacreous
Mar 20, 2019

If routing is not via F5, yet you need traffic to return to F5, then using SNAT is your only option.

 

You can use an X-Forwarded-For header to capture the client IP before SNAT which can be interperated by your webservers

 

https://support.f5.com/csp/article/K4816