Forum Discussion

CSOC_146480's avatar
CSOC_146480
Icon for Nimbostratus rankNimbostratus
Jan 26, 2016

web proxy XFF header https

Hello,   I have recently noticed that my configured F5 proxy is forwarding XFF for http but not for https. For https the F5 is being the broker for client and so client source becomes the F5 for h...
application delivery
BIG-IP DNS
LTM
CSOC_146480's avatar
CSOC_146480
Icon for Nimbostratus rankNimbostratus
Feb 03, 2016

Thanks, was already doing XFF insert in http profile on the VS but the problem was if using explicit proxy then XFF is encypted by the time it gets to next hop all the way to WWW server.

 

Not using the F5 as explicit proxy is working in the testing so far. User are now proxy terminating on next hop to F5 rather than the F5 with XFF being forwarded using snat via the VS. The VS is resolved as the proxy IP by GTM. All good.