Forum Discussion

tech_contact_90's avatar
tech_contact_90
Icon for Nimbostratus rankNimbostratus
Dec 11, 2009

x-forwarded-for http to https ssl client ip

we have a website say a.com that requires ssl with 2 nodes. we have an irule

 

 

when HTTP_REQUEST {

 

if { [HTTP::host] contains "a.com"} {

 

HTTP::redirect "https://[HTTP::host][HTTP::uri]"

 

}

 

}

 

 

all of the client ips are showing up in the iis logs as

 

 

2009-12-11 19:32:28 W3SVC446867077 172.16.3.240 GET /default.aspx - 443 - 172.16.3.10 - 302 0 0

 

or

 

2009-12-11 19:32:28 W3SVC446867077 172.16.3.241 GET /default.aspx - 443 - 172.16.3.10 - 302 0 0

 

on each of the nodes

 

 

we have tried adding the xforward HTTP::header insert "X-Forwarded-For" [IP::client_addr] like it says here http://devcentral.f5.com/weblogs/macvittie/archive/2008/06/02/3323.aspx and added the isapi filter like it says here for iis http://devcentral.f5.com/weblogs/joe/archive/2005/09/23/1492.aspx

 

 

we have tried changing it in the http profile but that doesnt seem to do anything either. any help is much appriciated.

 

Thanks
  • James_Quinby_46's avatar
    James_Quinby_46
    Historic F5 Account
    What is 172.16.3.10? Is that the address of your LTM? The X-Forwarded-For header is normally inserted to provide the client source IP when the LTM is SNAT'ing, that is, deployed in "one-armed" mode. Is that how your virtual server is configured now?