101 · Question #82
What does the insert XForwarded option in an HTTP profile do?
The correct answer is D. The client IP addresses are inserted into HTTP header.. The Insert X-Forwarded-For option in an F5 BIG-IP HTTP profile adds the original client IP address into the X-Forwarded-For HTTP request header before forwarding traffic to pool members.
Question
What does the insert XForwarded option in an HTTP profile do?
Options
- AA BIG-IP self-IP is inserted in the source address field on the serversid connection.
- BA BIG-IP self-IP is inserted in the source address field on the clintside connection.
- CThe client IP addresses are inserted into messages sent to remote syslog servers.
- DThe client IP addresses are inserted into HTTP header.
How the community answered
(43 responses)- A2% (1)
- C2% (1)
- D95% (41)
Why each option
The Insert X-Forwarded-For option in an F5 BIG-IP HTTP profile adds the original client IP address into the X-Forwarded-For HTTP request header before forwarding traffic to pool members.
The BIG-IP self-IP is not inserted into the IP source address field on the server-side connection by this feature; X-Forwarded-For operates at the HTTP application layer by modifying a header, not by rewriting a packet address field.
The BIG-IP self-IP is not inserted into any address field on the client-side connection; the feature modifies an HTTP request header in traffic directed toward the server, not toward the client.
The X-Forwarded-For option modifies HTTP headers in traffic forwarded to pool members, not in syslog messages; remote syslog integration uses a separate logging configuration on the BIG-IP.
When BIG-IP proxies or SNATs traffic, pool members only see the BIG-IP address as the source; inserting the X-Forwarded-For HTTP header allows servers to retrieve the true client IP address for logging, access control, and application logic without inspecting lower-layer packet fields.
Concept tested: X-Forwarded-For HTTP header insertion in BIG-IP HTTP profile
Source: https://techdocs.f5.com/en-us/bigip-15-1-0/big-ip-local-traffic-manager-implementations/inserting-http-headers.html
Topics
Community Discussion
No community discussion yet for this question.