Customer can view client's real IP on AKS on HCI

Azure / aksArc

# Welcome to the Azure Kubernetes Service enabled by Azure Arc (AKS Arc) repo This is where the AKS Arc team will track features and issues with AKS Arc. We will monitor this repo in order to engage with our community and discuss questions, customer scenarios, or feature requests. Checkout our projects tab to see the roadmap for AKS Arc!

MIT License

112 stars 45 forks source link

Customer can view client's real IP on AKS on HCI #257

Open PragyaDw opened 2 years ago

PragyaDw commented 2 years ago

For the customers who already have application running in AKS and,

They need to make HTTP calls to the application
They need to know the ip(s) of the clients calling
They have exposed the application behind a Service of type LoadBalancer

eponerine commented 1 year ago

We worked thru this by leveraging some type of other HTTP load balancer in front of nginx/AKS-Hybrid. In our case, we used a Netscaler appliance and passed it on using x-forwarded-for header. It stinks that we had to shim in another appliance, but it allowed us to capture the original source IPs.

baziwane commented 1 year ago

Link to a workaround: https://github.com/Pamir/aks-hci/blob/main/Demos/nginx-ingress-troubleshooting.md