I have a couple of 11501s-c-k9 that need to loadbalance a webfarm and want to terminate ssl on them. Moreover I would like the webservers to be aware of client ip address.
Can you confirm that the normal behaviour of the CSS would be to spoof the client ip address towards the web servers, after managing ssl termination ?
On the other hand, would it be possible for the CSS to open one single TCP session towards each web server and insert the client ip address in some specific http field ?
Thank you for your cooperation
yes, by default the CSS spoofs the client ip address when opening a connection to the server.
The feature you want to have a single connection to the server for all clients is called tcp-reuse and it's only available on the ACE module.
The CSS does not have the possibility the insert the ip address in the http header.
Again, this feature is present on the ACE module.