For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

kaladhar_48878's avatar
kaladhar_48878
Icon for Nimbostratus rankNimbostratus
Jul 06, 2018

sending client IPs to Pool members

Hello all,

 

can some one provide me solution/ i rule to see client ip or source ip details in the servers configured as pool member and the vip has port 443 https

 

for example : my external ip 216.58.21.3 is natted in firewall with 172.168.34.100 which has pool members 10.30.23.60 and 10.30.23.61 and also the vip has SNAT AUTOMAP. and SSL offloading on f5 the requirement I have is to send source IP details to pool members .

 

application delivery
iRules

2 Replies

  • Surgeon's avatar
    Surgeon
    Ret. Employee
    Jul 06, 2018

    If your firewall is doing src nat, then it need to add X-Forwarded-For header. If it is not, then you can apply http profile to the vip with XFF enabled option. There is no other way

     

  • kridsana's avatar
    kridsana
    Icon for Cirrocumulus rankCirrocumulus
    Jul 06, 2018

    If you already enable XFF. You can capture packet which F5 send to server.

     

    And you can see header X-Forwarded-for which include Client IP.

     

    Then you need to config server to retrieve Client IP from this header instead of snat IP from F5.