X-Forwarded-For

the x forwarded for (xff) request header is a de facto standard header for identifying the originating ip address of a client connecting to a web server through a proxy server when a client connects directly to a server, the client's ip address is sent to the server (and is often written to server access logs) but if a client connection passes through any forward or reverse proxies, the server only sees the final proxy's ip address, which is often of little use so, to provide a more useful client ip address to the server, the x forwarded for request header is used http proxy can understand and parse related headers however there is a need to add x forwarded for http header to packages that were sent by the client usually, load balancers handle this process if load balancer adds this header to the client’s requests before it forwards to http proxy, then http proxy parses the header, and the real client ip address can be shown in http proxy logs instead of the load balancer ip address the following steps should be followed to benefit from this feature sudo vi /u01/http proxy/conf/http proxy properties http proxy client ip header=x forwarded for \ wq! sudo systemctl restart pam http if the page to be accessed by the client uses the http protocol, the load balancer can add this tag to the plain text transmitted packets however, if the page to be accessed through the http proxy uses the https protocol, since the incoming packets will be in encrypted form, these packets must be decrypted on the load balancer and then re encrypted on the load balancer and sent to the http proxy after the relevant header is added this process can only be done by ssl offloading on the load balancer to avoid complex configurations, the most suitable method for transmitting the client ip address directly to the http proxy over the load balancer would be to run the load balancer in transparent mode