Forum Discussion

Allwin_179373's avatar
Allwin_179373
Icon for Nimbostratus rankNimbostratus
Jun 30, 2017

X-forwarded Http irule

Hi,

 

I'm able to get the user IP through X-forwarded Rule, is there any way we can forward the user details (Hostname/Username) to the backend Web servers.

 

4 Replies

  • X-FORWARDER-FOR is the header where the Client IP should be inserted, assuming that you enabled X-FORWARDED-FOR on the HTTP profile. The developers of the Web Servers will need to right custom code to pull it out I believe but it's in the header, X-FORWARDED-FOR.

     

  • You can use an HTTP profile with the Insert X-Forwarded-For setting enabled instead of an iRule and save a little performance overhead. With respect to Hostname, Hostname is already available in the HTTP Host header. There is nothing you need to do no the BIG-IP system to have that passed to the back end server. With respect to Username, the assumption, is for BIG-IP to be aware of it, it must be passed in the payload somewhere already, perhaps in a cookie or the HTTP query string. If so, you don't need to do anything on BIG-IP to have it passed to the back end server.

     

  • Hi Allwin,

     

    as crodriguez already mentioned, please provide us some more details where your user details (hostname, username) are located in the request (maybe you can provide a sample call). In case you have a standard configuration normally all parts of the request will be forwarded to the real server as is. Only IP-address (and maybe port) will be translated. But I assume the reason why you are asking is, that you don't see the required information on your servers although they will be send towards the F5?

     

    Ciao Stefan :)

     

    • Allwin_179373's avatar
      Allwin_179373
      Icon for Nimbostratus rankNimbostratus

      Hi Stefan,

       

      Thanks for the response.

       

      We are trying to get the usernames who are logging into the Citrix Web Interface Servers.

       

      When we configured the x-Forwarded for, we got the IP from where the user is getting logged into, but not the username.

       

      All the users are logging in to Citrix through F5 only, but via different modes as in Thin client, thick client, MPLS, etc...

       

      In this scenario, is there a possibility to find out the usernames?