Question: client source IP preservation

[niteenkole]

trafficstars

Describe the bug Multiple setup we need "client source IP preservation" due to audit or other logic like in finance app allow only this attempt and if more block.

Normal ingress if we create we have option "add --set controller.service.externalTrafficPolicy=Local to the Helm install command" is this valid here ?

https://docs.microsoft.com/en-us/azure/aks/ingress-basic To Reproduce Steps to reproduce the behavior:

Ingress Controller details

• Output of kubectl describe pod <ingress controller> . The pod name can be obtained by running helm list.
• Output of `kubectl logs .
• Any Azure support tickets associated with this issue.

[3quanfeng]

Hi @niteenkole, Thanks for the question. In terms of "client IP preservation", Azure Application Gateway automatically injects "X-FORWARDED-FOR" when it relays the request from client to the backend. AGIC install doesn't have that configuration now.

[egorchabala]

@3quanfeng do you have plans to release this functionality for AGIC?

[giotab]

@3quanfeng any feedback about this?

[ramazankilimci]

@3quanfeng we really need this feature. Any update on this?