Forum Discussion
cymru81
Altocumulus
AltocumulusX-Forwarded-For iRule
We are having problem where the ‘X-Forwarded-For’ header is missing when traffic is coming through the Load Balancer.
It has been working previously, but looking at what is coming back from the load balancer in the error logs. I can see this ‘X--------------: xxxxxxxxxxx’ which might mean that something is broke on the load balancer and it should be ‘X-Forwarded-For: IP ADDRESS’?
Has anyone else experienced similar?
We've enabled "Insert X-Forwarded-For" on the http profile.
I believe you need to pick one, either the iRule or enable insert-xforwarded-for in HTTP profile settings. Try removing the iRule and leaving just the HTTP profile option. It worked for me here in my lab. If you need help with the iRule you need to post the iRule you're using.
cymru81sorry im not clear but we dont have an irule for this currently just http profile setting. what should we try next?
Well, the X-Forwarded-For setting is supposed to work out of the box. I've tested myself in my lab here and it works. You should post the output of your HTTP profile configuration:
tmsh list ltm profile http
As well as the configuration of the virtual server you attached it to
tmsh list ltm virtual
And lastly take a sample packet capture on tmm (0.0) interface using a sample client of your choice:
tcpdump -i 0.0:nnnp -s0 -w /shared/tmp/xforwarded-test-v1.pcap -v
Community members might try to help you here but if it gets too complicated I'd advise you to open a case with F5 support as they can request a snapshop of your configuration (called qkview) and have a more thorough view of your system.
Regards, Rodrigo
- cymru81
Removing the irule made no difference, do i need to do anything in IIS?
