NimbostratusHTTPS requests coming from the Internet hit a VIP on Reverse proxy F5, then get forwarded to internal F5 LB VIP via HTTP. Then Internal F5 makes a load balancing decision and encrypts traffic and forwards to real server in pool.
Problem, RP snats request before sending request to Internal F5 VIP, so all requests will be coming from one IP.
What is the best method to always send a user to the same real server.
CirrocumulusWell, on your RP, you could add the X-Forwarded-For header, and pull the original Client IP address from that.
HERE is some info on that.
Hope that helps! If it does please up-vote and select this answer, it'd be greatly appreciated!
-Dylan
NimbostratusI see configuring X-Forwarded on the RP inserts the clients original IP address in header. Now how do you configure the LB on the inside F5 to look for that field in the header and apply some sort of stickiness before sending to real server in pool.
CirrocumulusFor that you could use Universal Persistence in an iRule.
HERE is some info on that! (:
Once again, hope that helps! If it does please up-vote and select this answer, it'd be greatly appreciated!
-Dylan