CSS 11503 Users using a proxy

Unanswered Question
Jul 27th, 2007
User Badges:

I currently have a CSS 11503 LB that I am using to balance 443 and 80 traffic and I have it working but my question is if a users are coming from a proxy should I continue to use Layer 3 LB technique? Also is it possible to see the real IP address instead of the IP of the proxy server?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Gilles Dufour Fri, 08/03/2007 - 00:53
User Badges:
  • Cisco Employee,

the problem with proxy is if you use some form of stickyness like sticky src ip.

Since the src ip is always the proxy, you end up with all your traffic going to a single server.

If you are doing sticky src ip, I would suggest to use arrowpoint-cookie instead.


To see the real-ip you need your proxy to insert in the http header a 'x-forwarded-for' line with the client ip.

Your servers can then extract this value to determine the client ip.


On the CSS you won't be able to see the client-ip.


Gilles.

Actions

This Discussion