cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
371
Views
0
Helpful
2
Replies

CSS 11503 Users using a proxy

laverne-sanders
Level 1
Level 1

I currently have a CSS 11503 LB that I am using to balance 443 and 80 traffic and I have it working but my question is if a users are coming from a proxy should I continue to use Layer 3 LB technique? Also is it possible to see the real IP address instead of the IP of the proxy server?

2 Replies 2

bstremp
Level 2
Level 2

Layer 3 load balancing is not needed.

Gilles Dufour
Cisco Employee
Cisco Employee

the problem with proxy is if you use some form of stickyness like sticky src ip.

Since the src ip is always the proxy, you end up with all your traffic going to a single server.

If you are doing sticky src ip, I would suggest to use arrowpoint-cookie instead.

To see the real-ip you need your proxy to insert in the http header a 'x-forwarded-for' line with the client ip.

Your servers can then extract this value to determine the client ip.

On the CSS you won't be able to see the client-ip.

Gilles.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: