IBM Support

Client IP address missing from the X-Forwarded-For header

Question & Answer


Question

Why is the Front End Load Balancer ( FELB ) not forwarding a client IP address to a backend?

Answer

This is a known limitation in the current implementation of haproxy ( FELB ), especially with the layer 7 where SSL termination is handled.

Notice that forwarding a client IP address to a backend works when the FELB is setup to use non-SSL configuration.

[{"Product":{"code":"SSPREK","label":"Tivoli Access Manager for e-business"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Front-end Load Balancer","Platform":[{"code":"PF004","label":"Appliance"}],"Version":"8.0;8.0.0.2;8.0.0.4;8.0.0.5;8.0.1;8.0.1.2;8.0.1.3;8.0.1.4;8.0.1.5;8.0.1.6;9.0;9.0.0.1;9.0.1","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
16 June 2018

UID

swg21971127