CSS: Real client's IP with source NAT via group

[savyer]

Is there any way to pass real client's IP to the server

when the client's IP is being source NAT'ed via group- destination-service? CSS is working in one-armed configuration.

[seilsz]

Your other two (2) options are:

1) Perform Policy Based Routing (PBR) on the device functioning as the backend servers default gateway.

2) Set the CSS as the default gateway for the backend servers.

~Zach

[savyer]

meaning my choices are only:

1) drop source NAT

2) convert one-armed to in-line mode

Can CSS do http hearder writting i.e upgate it with the real client's source IP?

[seilsz]

Correct. The CSS does not have the ability to rewrite the HTTP header.

~Zach

[pezz]

Are there any performance issues when using the CSS's

as a gateway / router?

Also, I believe the ability for a CSS to add an

X-Forwarded-For header would be invaluable for

correct loggin in situations where you're forced to

use a one-armed config...