Forum Discussion
Jericho_Gutierr
Nimbostratus
Aug 17, 2006'XForwarded for' adds second IP
I have the following scenario:
- External clients are load balanced to a pool of Apache proxies (Apache running mod_proxy). I've enabled 'XForwarded for' to preserve the client's IP address for log purposes.
- The Apache proxies send client traffic to a pool of Apache webservers. This pool does NOT have XForwarded enabled.
- The Apache proxies and webservers are hanging off the BigIP in a one-armed configuration, i.e. they are on the same VLAN.
The problem I'm seeing is that the requests to the webservers are showing two IPs in the 'XForwarded for' portion of the header: the original client IP, and the IP of the BigIP. Why is the BigIP self-ip included? How do I get rid of it?
- Jericho
- unRuleY_95363Historic F5 AccountYou could certainly add a rule that removes the existing X-Forwarded-For header (or renames it to X-X-Forwarded-For).
- mayur_108081
Nimbostratus
i am also getting both client ip & the ip of F5 in Apache logs ...with the below script: - What_Lies_Bene1
Cirrostratus
%h in your LogFormat statement will be the 'real' IP of the F5, remove that and all will be well.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects