nastymatt_11986
Feb 28, 2013Nimbostratus
Ip Forwarding
i.e. SNAT, or is simply the configuration of the pool? I have a feeling the client ip address is not getting forwarded (traffic coming from a cache - that ip address is showing in logs)
i.e. SNAT, or is simply the configuration of the pool? I have a feeling the client ip address is not getting forwarded (traffic coming from a cache - that ip address is showing in logs)
The settings on the varnish edge cache are set to HTTP::header insert X-Forwarded-For [IP::remote_addr], so X-Forwarded-For should be sending the client ip but I am sure the pool is not configured correctly and is still reading the client IP as the varnish server so not doing round robin.
So my question is, what are the settings required on a pool to read X-Forwarded-For to load balance by seeing the client ip?
sol7392: Overview of universal persistence
http://support.f5.com/kb/en-us/solutions/public/7000/300/sol7392.html
sol11362: Overview of the CARP hash algorithm
http://support.f5.com/kb/en-us/solutions/public/11000/300/sol11362.html
e.g.
[root@ve10:Active] config b rule myrule list
rule myrule {
when HTTP_REQUEST {
if { [HTTP::header exists "X-Forwarded-For"] } {
persist uie [HTTP::header "X-Forwarded-For"]
}
}
}
by the way, shouldn't we persist on destination/server ip instead of source/client ip?
Cheers guys