[Ext] F5 - Source IP

[Bryan Wooten]

Make sure "x-forwarded-for" is set to true in the load balancer.  There maybe additional configuration settings after that.

=Bryan

From: Lionel Samuel <lionel.samuel01 at gmail.com<mailto:lionel.samuel01 at gmail.com>>
Reply-To: "users at shibboleth.net<mailto:users at shibboleth.net>" <users at shibboleth.net<mailto:users at shibboleth.net>>
Date: Saturday, January 21, 2017 at 6:44 PM
To: "users at shibboleth.net<mailto:users at shibboleth.net>" <users at shibboleth.net<mailto:users at shibboleth.net>>
Subject: [Ext] F5 - Source IP

Hello:

Has anyone implement F5 where there is load balancing to multiple nodes of SPs?

Were there any challenges in ensuring that the client source IP was transmitted to the SP?

I am not an expert on F5 -- so far the IP received by the SP is not the client's browser -- which will be an issue from maintaining session, security audit etc. Haven't tried the vendor route yet -- hoping for feedback from others who may have faced this previously.

Thanks.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170122/4ac633c6/attachment.html>