201 · Question #333
A standard virtual server has been associated with a pool with multiple members. Assuming all other settings are left at their defaults, which statement is always true concerning traffic processed by
The correct answer is A. The client IP address is unchanged between the client side connection and the serverside. When a standard virtual server processes traffic with default settings, the client's original IP address is typically preserved for the server-side connection to the pool member.
Question
A standard virtual server has been associated with a pool with multiple members. Assuming all other settings are left at their defaults, which statement is always true concerning traffic processed by the virtual server?
Options
- AThe client IP address is unchanged between the client side connection and the serverside
- BThe server IP address is unchanged between the client side connection and the serverside
- CThe TCP ports used in the client side connection are the same as the TCP ports serverside
- DThe IP addresses used in the clientside connection are the same as the IP addresses used in the
How the community answered
(50 responses)- A92% (46)
- B2% (1)
- C4% (2)
- D2% (1)
Why each option
When a standard virtual server processes traffic with default settings, the client's original IP address is typically preserved for the server-side connection to the pool member.
By default, a standard virtual server acts as a full proxy. In configurations where Source Network Address Translation (SNAT) is not explicitly enabled or set to automap, the virtual server establishes a new connection to the backend server using the original client IP address as the source, thus preserving it from the client-side to the server-side connection. This allows backend servers to log the true client IP without additional configuration like X-Forwarded-For headers.
The server IP address on the client-side is the Virtual Server IP (VIP), but on the server-side, the connection is made to the specific pool member's IP, which is different from the VIP.
The TCP source port used in the server-side connection is typically an ephemeral port chosen by the load balancer, which may not be the same as the client-side source port.
The destination IP on the client-side is the Virtual Server IP, while the destination IP on the server-side is the specific pool member's IP; therefore, the IP addresses are not the same.
Concept tested: Virtual Server default client IP preservation
Source: https://techdocs.f5.com/en-us/bigip-15-0-0/big-ip-local-traffic-management-concepts/standard-virtual-servers.html
Topics
Community Discussion
No community discussion yet for this question.