oci-network-lb-source-header

#oci-network-lb-source-header

In my case running Traefik on docker I was not getting real ip addresses. I changed the NLB option Source header (IP, port) preservation: Enabled

NOTE: To change this you need to remove the targets from the backend set first.

console issue

Suddenly the console did not allow me to re-add the VM.Standard.A1.Flex server back into the backend set. It required me to upgrade to a paid account. Which is nonsense since I used this server as a target for a long time and now suddenly they want to be sneaky with free options. At least the CLI did add the IP back in.

1
❯ ocicli nlb backend create --backend-set-name server01-443 --network-load-balancer-id <nlb ocid> --port 443 --ip-address 10.0.10.226

test

1
$ curl https://whoami.virrio.com
2
Hostname: d86282cf4314
3
IP: 127.0.0.1
4
IP: 192.168.240.5
5
RemoteAddr: 192.168.240.10:39018
6
GET / HTTP/1.1
7
Host: whoami.virrio.com
8
User-Agent: curl/7.81.0
9
Accept: */*
10
Accept-Encoding: gzip
11
X-Forwarded-For: 141.148.143.6
12
X-Forwarded-Host: whoami.virrio.com
13
X-Forwarded-Port: 443
14
X-Forwarded-Proto: https
15
X-Forwarded-Server: 7ec716586d0b
16
X-Real-Ip: 141.148.143.6