Forum Discussion

Mudassar's avatar
Mudassar
Icon for Altostratus rankAltostratus
Aug 20, 2021

Can we pass client actual ip for non http traffic?

We have f5 in dual arm. SNAT is being used. If I use iRule to extract client ip address at the time of connection, will it work? Or is there any other way to pass client actual ip to backend?
application delivery
BIG-IP
iRules
security
Yiğit_Uslu's avatar
Yiğit_Uslu
Icon for Cirrus rankCirrus

Hi Mudassar,

 

Unfortunately iRule won't work. You are able to get the client IP but you only can add it to a header information.

Mudassar's avatar
Mudassar
Icon for Altostratus rankAltostratus
Aug 22, 2021

Hello,

 

thanks for the reply. You means to say that we can’t pass it to backend servers? Only f5 will have those ips?

  • Yiğit_Uslu's avatar
    Yiğit_Uslu
    Icon for Cirrus rankCirrus
    Aug 22, 2021

    Yes, If you need to see real IP on this scenario, set your server's default gateway to F5 floating IP address and disable SNAT.