Forum Discussion

Martin182's avatar
Martin182
Icon for Nimbostratus rankNimbostratus
Oct 16, 2023

X-Forwarded-For on L4 VS

Hello again guys, I'm involved in a specific configuration these days. We have a simple virtual server configured in TCP mode that dismounts into a web service. So far, there was no specific require...
application delivery
  • Sebastiansierra's avatar
    Sebastiansierra
    Oct 17, 2023

    Hi Martin182,

    There are two possibilities to solve this:

    1. Configure the virtual server as standard and apply an http profile with x-forwarder-for " the most simple".

    2. Configure the F5 as a router with a couple of Virtual Servers 0.0.0.0/0 for TCP and UDP and make the Self-IP in the server's network of the F5, the default gateway for servers and avoid snat, it allows servers to reach outside through the F5.

    Hope it works.

Paulius's avatar
Paulius
Icon for MVP rankMVP

Martin182 With the VS setup as an L4 VS you cannot manipulate any of the HTTP data which includes the HTTP header.

Martin182's avatar
Martin182
Icon for Nimbostratus rankNimbostratus
Oct 17, 2023

Yes, that's what I was afraid of, there is no alternative to be able to deliver the real ip then?

  • Sebastiansierra's avatar
    Sebastiansierra
    Icon for MVP rankMVP
    Oct 17, 2023

    Hi Martin182,

    There are two possibilities to solve this:

    1. Configure the virtual server as standard and apply an http profile with x-forwarder-for " the most simple".

    2. Configure the F5 as a router with a couple of Virtual Servers 0.0.0.0/0 for TCP and UDP and make the Self-IP in the server's network of the F5, the default gateway for servers and avoid snat, it allows servers to reach outside through the F5.

    Hope it works.