cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1041
Views
0
Helpful
1
Replies

ACE30 Load balancing based on IP and using x-forward-for header

sgonsalv
Level 1
Level 1

Hi Guys,

 

We currently have a load balancing policy setup to direct traffic to say FARM-A based on a particular range of source (client) IP addresses, and the default FARM-B for all the other traffic.

We are now looking to introduce a web application firewall (WAF) before the ACE.  The WAF will be inserting the client IP address into the x-forward-for http header.  Now I was wondering how best can be achieve the load balancing based on source IP given that we'll have to parse the HTTP header for this x-forward-for field?  Are there any examples that anyone can point me to? 

 

let me know if you have any questions.

thanks

Sheldon

1 Reply 1

Alex Rickard
Level 1
Level 1

Hi Sheldon,

 

You might try creating a class map that matches on the XFF header. Then use that as the L7 load balance criteria (based on the hash value of the XFF header), using the predictor hash header.

 

-Alex