F5 转发IP的配置.docVIP

A SNAT is an object that maps an original client IP address to a translation address defined on the BIG-IP device. When the BIG-IP system receives a request from a client IP address, and if the client IP address in the request is defined in a SNAT, the BIG-IP system translates the source IP address of the incoming packet to the SNAT address. When the BIG-IP system translates the source IP address of the incoming packet to the SNAT address, the web server sees request as originating from the SNAT address, not the original client IP address. If the web servers are required to log the original client IP address for requests, the SNAT address translation behavior can become problematic. It may be necessary for the BIG-IP system to insert the original client IP address in an HTTP header and configure the web server receiving the request to log the client IP address instead of the SNAT address. Note: HTTP requests processed by the BIG-IP WebAccelerator module will also experience a source address translation. The client IP address is inserted as an HTTP header named X-Remote-Addr. No configuration is required on the BIG-IP for the X-Remote-Addr HTTP header to be inserted. For information about using the X-Remote-Addr HTTP header to preserve the original client IP address for traffic being translated by a WebAccelerator, refer to SOL7441: Using the X-Remote-Addr HTTP header to preserve the original client IP address for traffic being translated by a WebAccelerator. To configure the BIG-IP system to insert the original client IP address in an X-Forwarded-For HTTP header, you can use one of the following methods: Enable Insert XForwardedFor in the HTTP profile iRule Enabling the Insert XForwardedFor in the HTTP profile To configure the BIG-IP system to insert the original client IP address in an X-Forwarded-For HTTP header, perform the following procedure: Log in to the BIG-IP Configuration utility. Click Local Traffic. Click Profiles. Click HTTP from the Services drop-dow