For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Karim_51672's avatar
Karim_51672
Icon for Nimbostratus rankNimbostratus
Jul 09, 2008

Remote_addr using SNAT

I am using SNAT and need the actual remote (client) address to show up on the server in "remote_addr" field. Instead it always shows up as BIG-IP's address. I have the x-forwarded working but it's only good for logging purposes and my applications uses the "remote_addr" field to process the transaction.

 

I have read a lot in this forum and need someone to confirm my conclusion.

 

It is NOT possible to change the remote_addr in the header to be the actual client address if I am using SNAT. The only way to get the actual remote (client) address to the server is by NOT using SNAT and by setting the webserver's default gateway to BIG-IP's address.

 

 

Thanks in advance.
application delivery
dev
devops
iRules

2 Replies

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Jul 09, 2008
    You're correct. You'd either need to change the app to read the XFF header instead of the REMOTE_ADDR CGI variable or change the routing so that you can disable SNAT on LTM and still ensure responses to the client return through LTM.

     

     

    Aaron