Forum Discussion

KOR_124005's avatar
KOR_124005
Icon for Nimbostratus rankNimbostratus
Jun 23, 2014

we need that the source IP adress arrive until server

Hi All,

 

hope you are fine

 

please we need your support, we need that the source IP adress arrive until server

 

i try sol4816: Using the X-Forwarded-For HTTP header to preserve the original client IP address for traffic translated by a SNAT

 

but the issue is still present

 

thank you in advance.

 

6 Replies

  • The X-Forwarded-For header includes a header. It does not change the source address. If you need source arrive at server, turn off SNAT. If connection stop working, turn on SNAT because you need it.

     

  • Hi Kevin

     

    if i cannot turn off SNAT, how to resolve this point ? how i can return source address to server ?

     

    BR

     

  • Hi Kevin,

     

    Is it possible to apply an IRule to recover ip on XFF field and returned to the server ?

     

  • kunjan's avatar
    kunjan
    Icon for Nimbostratus rankNimbostratus

    If the intention is to log the source IP address that connects to the web server, then you can use X-Forwarded-For header. You need to configure the web server to log the X-Forwarded-For header. Link. The source IP address will remain that of SNAT.

     

  • You can recover the XFF header in an iRule and supply that to the server in a header of your choice. However if you need SNAT to make the application work, you cannot simply change the source address of the actual request going to the server.

     

    • KOR_124005's avatar
      KOR_124005
      Icon for Nimbostratus rankNimbostratus
      Thank you very much for your help, I'll work on it BR,