Forum Discussion

Waylon's avatar
Waylon
Icon for Nimbostratus rankNimbostratus
Feb 05, 2016

X-Forwarded-for with SSL Passthrough (no offloading on LTM)

Hi,   Is there a way to get X-forwarded-for working with SSL passthrough (NO offloading)?   I have some system owners who refuse to have any form of "man in the middle" sessions and require the...
application delivery
iRules
LTM
ssl passthrough
Hannes_Rapp's avatar
Hannes_Rapp
Icon for Nimbostratus rankNimbostratus
Feb 05, 2016

All HTTP headers (incl. the optional X-Forwarded-For) are subject to encryption whenever SSL is enabled. You cannot read or modify the HTTP headers without offloading the SSL on the clientside.

 

If the issue is a lack of visibility of the real customer IP address, you may want consider a HSL logging solution, or consider changing your routing topology so that translating a customer IP is no longer required. There are no other options.

 

Regards,