Forum Discussion

mhd90_359601's avatar
mhd90_359601
Icon for Nimbostratus rankNimbostratus
Dec 12, 2018

Values in X-Forwarded-For when SNAT is enable

Hi I have a case where user has pointed out that the X-Forwarded-For has F5 self ip. F5 has automap enabled. Is this expected behaviour? The VS has tcp profile, so nothing being done by F5 to the htt...
application delivery
BIG-IP
LTM
DaveS_377638's avatar
DaveS_377638
Icon for Cirrus rankCirrus

I suggest you look at the server that is the node for the VS that is setting this header. Since the LTM is set for SNAT/automap, the self IP address will be the client address seen by that server.

 

mhd90_359601's avatar
mhd90_359601
Icon for Nimbostratus rankNimbostratus
Dec 13, 2018

i do have the header capture from the server, and it shows Header [x-forwarded-for]: x.x.x.x x.x.x.x is the f5 self ip

 

My question is, is this expected behavior? My understanding was, if i dont change or insert anything in the header through F5, the XFF value should not reflect the f5 ip...