Forum Discussion

lijinlong_54534's avatar
lijinlong_54534
Icon for Nimbostratus rankNimbostratus
Dec 05, 2009

ssloffload for IIS but can't used http profile

I had two IIS,and SSLofload used for IIS ,I had used SNAT.now I want to used x-forward-for,but if I used http profile,I can't access my side,so I can't see de real client IP.why if http profile be used,I can't access my side?if client ssl profile can't work with http profile?

 

THX

6 Replies

  • Nicolas_Berthie's avatar
    Nicolas_Berthie
    Historic F5 Account
    SSL offload can work with http profile. You need following configuration to have what you want :

     

     

    - HTTP profile with X-Fowarded-For activate

     

    - SNAT

     

    - ClientSSL profile

     

     

    Regards,

     

     

    Nicolas
  • If the configuration order was not follow :

     

    - HTTP profile with X-Fowarded-For activate

     

    - SNAT

     

    - ClientSSL profile

     

    the ltm will not work currently?
  • I repeat the problem

     

    I had two IIS servers,and SSLofload used for IIS ,I had used SNAT。Now,the customer want to IIS log client real IP,so I want to use x-forwarded-for 。Then,I creat a http profile,and select it for the VS(there isn't had any http profile early)。But the problem is coming。I access my site,I receive a message “you are confined to access the site”by IIS,and if I take of the http profile ,the problem is gone。so I don't know why。
  • It sounds like the ssl decryption and SNAT are working properly, but the web application doesn't function correctly when you add an HTTP profile. Is that accurate?

     

     

    If that is correct, is it possible that the authentication is failing when an HTTP profile is enabled? Can you provide more detail on what the client sees when an HTTP profile is enabled? Can you clarify what response codes the server sends as well?

     

     

    Thanks,

     

    Aaron
  • the Browser show “you are confined to access the site”。and the response codes is 200ok。
  • Hi Every Body,

     

    Right now I have the same problem, can any Body tell me how can I faced it? or if It was possible to fixed.

     

     

    Thanks in advance