Forum Discussion

MaxMedov's avatar
MaxMedov
Icon for Cirrostratus rankCirrostratus
Feb 25, 2023

VIP Type decision

Hi, I need help deciding between choosing the best compatible type for the VIP. The needs: Customer-facing VIP that will forward client data to other VIPS. Behind this 'backend' VIP will be a few s...
application delivery
security
MaxMedov's avatar
MaxMedov
Icon for Cirrostratus rankCirrostratus

So you say I will not see the source IP of the client on the backend VIPS?
I made a test and set WAF on the backend VIP.
Send GET to the Front VIP, check the WAF logs on the backend VIP, and receive XFF.

I'm unsure about the SSL process. Can you please clarify it for me?
When configuring Performance L4 type, LTM forwards the traffic as 1-4 layers F5 is transparent to the client.

If I need to handle SSL (client profile) on the backend VIP, how its work?

 

Amine_Kadimi's avatar
Amine_Kadimi
Icon for MVP rankMVP
Feb 27, 2023

Yes I said that. Seeing XFF headers in backend logs does not mean they have been inserted by the Performance L4 VS. I'm not aware of your setup and I cannot tell what intermediary server has inserted the headers but if you get them then it's good for you.

For new issues please start a new thread