Forum Discussion
lijinlong_54534
Nimbostratus
Dec 05, 2009ssloffload for IIS but can't used http profile
I had two IIS,and SSLofload used for IIS ,I had used SNAT.now I want to used x-forward-for,but if I used http profile,I can't access my side,so I can't see de real client IP.why if http profile be used,I can't access my side?if client ssl profile can't work with http profile?
THX
6 Replies
- Nicolas_BerthieHistoric F5 AccountSSL offload can work with http profile. You need following configuration to have what you want :
- HTTP profile with X-Fowarded-For activate
- SNAT
- ClientSSL profile
Regards,
Nicolas - lijinlong_54534
Nimbostratus
If the configuration order was not follow :
- HTTP profile with X-Fowarded-For activate
- SNAT
- ClientSSL profile
the ltm will not work currently? - lijinlong_54534
Nimbostratus
I repeat the problem
I had two IIS servers,and SSLofload used for IIS ,I had used SNAT。Now,the customer want to IIS log client real IP,so I want to use x-forwarded-for 。Then,I creat a http profile,and select it for the VS(there isn't had any http profile early)。But the problem is coming。I access my site,I receive a message “you are confined to access the site”by IIS,and if I take of the http profile ,the problem is gone。so I don't know why。 - hoolio
Cirrostratus
It sounds like the ssl decryption and SNAT are working properly, but the web application doesn't function correctly when you add an HTTP profile. Is that accurate?
If that is correct, is it possible that the authentication is failing when an HTTP profile is enabled? Can you provide more detail on what the client sees when an HTTP profile is enabled? Can you clarify what response codes the server sends as well?
Thanks,
Aaron - lijinlong_54534
Nimbostratus
the Browser show “you are confined to access the site”。and the response codes is 200ok。 - fide321_29582
Nimbostratus
Hi Every Body,
Right now I have the same problem, can any Body tell me how can I faced it? or if It was possible to fixed.
Thanks in advance
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects
