Blue Coat Systems Understanding Proxy SG Configurations: Managing Client IP Addresses

ProxySG Content Policy Language Guide

reflect_ip( )

Determines how the client IP address is presented to the origin server for explicitly proxied requests.

Replaces:

•reflect_ip(vip) replaces reflect_vip(yes).

•reflect_ip(auto) replaces reflect_vip(no).

Syntax

reflect_ip(autonoclientvipip_address) The default value is auto.

where:

•auto—Might reflect the client IP address, based on a config setting for spoofing.

•no—The appliance's IP address is used to originate upstream connections.

•client—The client's IP address is used in initiating upstream connections.

•vip—The appliance's VIP on which the client request arrived is used to originate upstream traffic.

•ip_address—A specific IP address, which must be an address (either physical or virtual) belonging to the ProxySG . If not, at runtime this is converted to auto.

Layer and Transaction Notes

•Use in <Proxy> and <Forward> layers.

•Applies to proxy transactions.

Example

;For requests from a specific client, use the virtual IP address. <proxy>

client.address=10.1.198.0 reflect_vip(yes)

See Also

• Properties: forward( )

204