topic Re: SAP Router - Load Balancer Citrix - Client IP forwarding in DevOps and System Administration Forum

SAP Router - Load Balancer Citrix - Client IP forwarding

felixfelix79 — Mon, 04 Dec 2023 10:19:07 GMT

Hello all,

i have a question regarding SAP Router and Citrix Load Balancer. We need to route the client IP Adress via the loadbalancer to the SAP Router. The Settings on the Loadbalancer are made - but on the SAPRouter (saprouter -l or netstat) we only see the internal IP of Loadbalancer and no client IP adress. The IP is transmitted via x-forwarded-for header. Is there any setting to be done on the saprouter to enable "x-forwarded-for"? Is there a other possibility to achive the routing of the client ip adress to saprouter VM?

Thanks,

Felix

Re: SAP Router - Load Balancer Citrix - Client IP forwarding

mamartins — Tue, 05 Dec 2023 09:28:35 GMT

What is the exact problem that are you trying to solve with this network architecture?

Could you post here a diagram to better understand it?

Re: SAP Router - Load Balancer Citrix - Client IP forwarding

S_Sriram — Tue, 05 Dec 2023 12:00:29 GMT

Hi Felix,

1. From the Citrix load balancer (public IP along with port number) nat to private IP with the same port.

2. Basic SAP router configuration from router to backend SAP system.

Regards

Re: SAP Router - Load Balancer Citrix - Client IP forwarding

felixfelix79 — Wed, 06 Dec 2023 14:55:57 GMT

We have one Loadbalancer with a public IP and two SAPROUTERS behind. We would like to route the client IP Adresses incoming over the loadbalancer Citrix to the saprouters. Right now the client ip adress are only transfered in HEX Code. So the question is: Is the saprouter able to translate this Hexcode to plaintext ip adress, so that you can see the client IP Adress (in saprouter -l for example). Right now we can only see the internal IP of Loadbalancer as client request IP in plaintext. (saprouter -l // netstat)

Re: SAP Router - Load Balancer Citrix - Client IP forwarding

felixfelix79 — Wed, 06 Dec 2023 14:56:16 GMT

Dont know what you mean - our scenario:

We have one Loadbalancer with a public IP and two SAPROUTERS behind. We would like to route the client IP Adresses incoming over the loadbalancer Citrix to the saprouters. Right now the client ip adress are only transfered in HEX Code. So the question is: Is the saprouter able to translate this Hexcode to plaintext ip adress, so that you can see the client IP Adress (in saprouter -l for example). Right now we can only see the internal IP of Loadbalancer as client request IP in plaintext. (saprouter -l // netstat)