I have recently implemented a CSS11506 transparent cache solution to a cache engine. All client port 80 traffic is redirected to the cache and everything works OK.
On the cache engine I have the feature where by for certain sites I can choose not to cache the objects. What this means is that packets from the cache retain the clients IP address and not that of the cache as the source IP. Packets from the origin server should go directly to the client and bypass the cache. This is the bit I'm having problems with.
When I put a sniffer between the CSS and the Cache, I can see the TCP Syn with the client as source IP and origin server as the destination IP. I do not see this TCP Syn on my link to my Internet router. Does the CSS perform some form of anti-spoofing or are there some commands which will enable me to allow this feature.