Forum Discussion
tech_contact_90
Nimbostratus
Dec 11, 2009x-forwarded-for http to https ssl client ip
we have a website say a.com that requires ssl with 2 nodes. we have an irule
when HTTP_REQUEST {
if { [HTTP::host] contains "a.com"} {
HTTP::redirect "https://[HTTP::host][HTTP::uri]"
}
}
all of the client ips are showing up in the iis logs as
2009-12-11 19:32:28 W3SVC446867077 172.16.3.240 GET /default.aspx - 443 - 172.16.3.10 - 302 0 0
or
2009-12-11 19:32:28 W3SVC446867077 172.16.3.241 GET /default.aspx - 443 - 172.16.3.10 - 302 0 0
on each of the nodes
we have tried adding the xforward HTTP::header insert "X-Forwarded-For" [IP::client_addr] like it says here http://devcentral.f5.com/weblogs/macvittie/archive/2008/06/02/3323.aspx and added the isapi filter like it says here for iis http://devcentral.f5.com/weblogs/joe/archive/2005/09/23/1492.aspx
we have tried changing it in the http profile but that doesnt seem to do anything either. any help is much appriciated.
Thanks
- James_Quinby_46Historic F5 AccountWhat is 172.16.3.10? Is that the address of your LTM? The X-Forwarded-For header is normally inserted to provide the client source IP when the LTM is SNAT'ing, that is, deployed in "one-armed" mode. Is that how your virtual server is configured now?
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects