Forum Discussion

kaladhar_48878's avatar
kaladhar_48878
Icon for Nimbostratus rankNimbostratus
Jul 06, 2018

sending client IPs to Pool members

Hello all,

 

can some one provide me solution/ i rule to see client ip or source ip details in the servers configured as pool member and the vip has port 443 https

 

for example : my external ip 216.58.21.3 is natted in firewall with 172.168.34.100 which has pool members 10.30.23.60 and 10.30.23.61 and also the vip has SNAT AUTOMAP. and SSL offloading on f5 the requirement I have is to send source IP details to pool members .

 

  • Surgeon's avatar
    Surgeon
    Ret. Employee

    If your firewall is doing src nat, then it need to add X-Forwarded-For header. If it is not, then you can apply http profile to the vip with XFF enabled option. There is no other way

     

  • If you already enable XFF. You can capture packet which F5 send to server.

     

    And you can see header X-Forwarded-for which include Client IP.

     

    Then you need to config server to retrieve Client IP from this header instead of snat IP from F5.