nerdexam
F5

101 · Question #82

What does the insert XForwarded option in an HTTP profile do?

The correct answer is D. The client IP addresses are inserted into HTTP header.. The Insert X-Forwarded-For option in an F5 BIG-IP HTTP profile adds the original client IP address into the X-Forwarded-For HTTP request header before forwarding traffic to pool members.

Section 5: Application Delivery Basics

Question

What does the insert XForwarded option in an HTTP profile do?

Options

  • AA BIG-IP self-IP is inserted in the source address field on the serversid connection.
  • BA BIG-IP self-IP is inserted in the source address field on the clintside connection.
  • CThe client IP addresses are inserted into messages sent to remote syslog servers.
  • DThe client IP addresses are inserted into HTTP header.

How the community answered

(43 responses)
  • A
    2% (1)
  • C
    2% (1)
  • D
    95% (41)

Why each option

The Insert X-Forwarded-For option in an F5 BIG-IP HTTP profile adds the original client IP address into the X-Forwarded-For HTTP request header before forwarding traffic to pool members.

AA BIG-IP self-IP is inserted in the source address field on the serversid connection.

The BIG-IP self-IP is not inserted into the IP source address field on the server-side connection by this feature; X-Forwarded-For operates at the HTTP application layer by modifying a header, not by rewriting a packet address field.

BA BIG-IP self-IP is inserted in the source address field on the clintside connection.

The BIG-IP self-IP is not inserted into any address field on the client-side connection; the feature modifies an HTTP request header in traffic directed toward the server, not toward the client.

CThe client IP addresses are inserted into messages sent to remote syslog servers.

The X-Forwarded-For option modifies HTTP headers in traffic forwarded to pool members, not in syslog messages; remote syslog integration uses a separate logging configuration on the BIG-IP.

DThe client IP addresses are inserted into HTTP header.Correct

When BIG-IP proxies or SNATs traffic, pool members only see the BIG-IP address as the source; inserting the X-Forwarded-For HTTP header allows servers to retrieve the true client IP address for logging, access control, and application logic without inspecting lower-layer packet fields.

Concept tested: X-Forwarded-For HTTP header insertion in BIG-IP HTTP profile

Source: https://techdocs.f5.com/en-us/bigip-15-1-0/big-ip-local-traffic-manager-implementations/inserting-http-headers.html

Topics

#HTTP profile#X-Forwarded-For#HTTP headers#client IP visibility

Community Discussion

No community discussion yet for this question.

Full 101 Practice