For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Mohammad_1363's avatar
Mohammad_1363
Icon for Altocumulus rankAltocumulus
Oct 01, 2021

Website does not load after using X-Forwarded-For HTTP header

Hello I need to see the client real IP to one of my publicly available website, to do that, i enabled the X-Forwarded-For under http profile (client) after that the website did not come up, i tried ...
application delivery
BIG-IP
LTM
Daniel_Wolf's avatar
Daniel_Wolf
Icon for MVP rankMVP
Oct 02, 2021

Hi ,

 

you say that SSL is terminated on the backend and not on the F5. Therefore the BIG-IP cannot insert any HTTP headers.

 

Please see K4816: Using the X-Forwarded-For HTTP header to preserve the original client IP address for traffic translated by a SNAT object

Quoting from there:

"Note: You can insert HTTP headers in HTTPS traffic only if the client connects to a BIG-IP virtual server configured with a Client SSL profile. When the BIG-IP system terminates the SSL connection, it has access to the unencrypted HTTP data."

 

You can only insert a X-Forwarded-For header once you make your virtual server capable of performing SSL decryption/encryption. For details see: K12015: Configuration requirements for SSL virtual servers, profiles, pools, and monitors.

 

KR

Daniel