Forum Discussion

Joe_Pipitone's avatar
Joe_Pipitone
Icon for Nimbostratus rankNimbostratus
Oct 11, 2019

Performance (HTTP) and x-forwarded-for

Hello everyone,

I have a Performance (HTTP) profile forwarding traffic to an Apache web server. I had major issues with Performance (Layer 4) and kept getting dropped connections, so I had to change it to HTTP. All is well now.

In my web server log, the BigIP is passing our floating IP through - even though I have x-forwarded-for enabled in the fasthttp profile. The self IP is also the default gateway for the web server. I also have SNAT automap enabled, as I'm using LetsEncrypt from the server, and the IP address has to match our DNS records to get a certificate issued properly.

Any idea what I can do to pass the original client IP through to this web server on this forwarding VIP if x-forwarded-for doesn't appear to be working? I've tried to use an irule that does the following, however it drops all connections to the VIP:

when HTTP_REQUEST { HTTP::header insert X-Forwarded-For [IP::remote_addr] }

I appreciate any help.

2 Replies

  • OK - please forgive me, I am just now realizing I had to enable this in my apache config to extract x-forwarded-for info.

     

    Question still remains - I wonder if there is a way to change the client IP on my apache server-status page.