How To Filter By IP Behind A Load Balancer and Proxy Web Cache in Oracle API Gateway.

(Doc ID 1565555.1)

Last updated on AUGUST 18, 2017

Applies to:

Oracle API Gateway - Version 11.1.2 and later
Information in this document applies to any platform.

Goal

Installing an OAG Cluster, mainly to filter client request by IP Address

Clients requests that originate from one set of IP addresses to a service should be denied, but requests from a second set of IP addresses to that service should be granted.  This was originally performed successfully using an IP Address filter.

In order to have High Availability, a load balancer was put between clients and the OAG cluster for requests originating externally, and a web cache is being used for internal requests.  Now all client requests seem to come from the front end IP with regards to the operation of the IP Address filter.

The same results occur with other sorts of proxies are configured between client and OAG: http proxy, etc.

How is it possible to filter by client IP address behind a load balancer and web cache?
 

Solution

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms