For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

vedranr_225213's avatar
vedranr_225213
Icon for Nimbostratus rankNimbostratus
Nov 09, 2017

X-Forward without a http profile?

I have a VIP that does SSL pass-trough (F5 doesn't offload any SSL_, so I can't use a http profile but I would like to have X-Froward enabled.   Is there a way to accomplish that?   Thx,   V...
application delivery
LTM
x-forward
Jad_Tabbara__J1's avatar
Jad_Tabbara__J1
Icon for Cirrostratus rankCirrostratus
Nov 09, 2017

Hello Vedran,

 

You can't add the XFF without HTTP profile.

 

Also if you don't terminate the SSL on the F5, the system cannot manage headers since the full headers and body are encrypted.

 

If you want to add the XFF you should at least make SSL Bridging.

 

Which means that you will have an SSL tunnel btw the client and the F5 and another one btw the F5 and the backend server.

 

Regards