Appendix A - Understanding Source IP Address Visibility on the Real Server

Scenario # Transparency Subnet Originating Requests SSL Offloading SSL Reencryption Is the Real Server local? Real Server will see production traffic from
0 No No No No No Virtual Service address
1 No No No No Yes Virtual Service address
2 No No No Yes No Invalid setting - cannot re-encrypt without offloading first
3 No No No Yes Yes Invalid setting - cannot re-encrypt without offloading first
4 No No Yes No No Virtual Service address
5 No No Yes No Yes Virtual Service address
6 No No Yes Yes No Virtual Service address
7 No No Yes Yes Yes Virtual Service address
8 No Yes No No No Virtual Service address
9 No Yes No No Yes Server side interface
10 No Yes No Yes No Invalid setting - cannot re-encrypt without offloading first
11 No Yes No Yes Yes Invalid setting - cannot re-encrypt without offloading first
12 No Yes Yes No No Virtual Service address
13 No Yes Yes No Yes Server side interface
14 No Yes Yes Yes No Default gateway interface
15 No Yes Yes Yes Yes Server side interface
16 Yes No No No No Invalid setting - cannot use transparency with non-local servers
17 Yes No No No Yes Client's IP address
18 Yes No No Yes No Invalid setting - cannot re-encrypt without offloading first
19 Yes No No Yes Yes Invalid setting - cannot re-encrypt without offloading first
20 Yes No Yes No No Invalid setting - cannot use transparency with non-local servers
21 Yes No Yes No Yes Client's IP address
22 Yes No Yes Yes No Invalid setting - cannot use transparency with non-local servers
23 Yes No Yes Yes Yes Invalid setting - cannot re-encrypt without offloading first
24 Yes Yes No No No Invalid setting - cannot use transparency with non-local servers
25 Yes Yes No No Yes Client's IP address
26 Yes Yes No Yes No Invalid setting - cannot use transparency with non-local servers
27 Yes Yes No Yes Yes Invalid setting - cannot re-encrypt without offloading first
28 Yes Yes Yes No No Invalid setting - cannot use transparency with non-local servers
29 Yes Yes Yes No Yes Client's IP address
30 Yes Yes Yes Yes No Invalid setting - cannot use transparency with non-local servers
31 Yes Yes Yes Yes Yes Invalid setting - cannot use transparency with non-local servers