ADC

Use client source IP address for backend communication in a v4-v6 load balancing configuration

August 20, 2024

Contributed by:

C C S

In a v4-to-v6 load balancing configuration, for services with USIP disabled, the Citrix ADC appliance communicates to the related servers from one of the configured IPv6 SNIP (SNIP6) addresses.

For services with USIP enabled, you must set the global USIP NAT prefix parameter for making the related servers aware of the client’s IP address of the request packets. USIP NAT prefix is a global IPv6 prefix of length 32/40/48/56/64/96 bits configured on the Citrix ADC appliance.

For a load balancing service that has USIP enabled, the appliance translates the IPv4 request packet to an IPv6 packet and sets the source IP address of the translated IPv6 packet to a concatenation of:

the USIP NAT prefix of length of 32/40/48/56/64/96 bits.
zeros padded if the USIP NAT prefix length is less than 96 bits. Number of bits padded with zeros = 96-USIP NAT prefix length. For example, if the USIP NAT prefix length is 64, then the number of bits padded with zeros = 96-64 = 32.
the IPv4 source address [32 bits] that was received in the request packet. In other words, the last 32 bits of the source IPv6 address is set to the IPv4 address of the client.

On receiving an IPv6 response packet from the server, the Citrix ADC appliance translates the IPv6 packet to an IPv4 packet and sets the destination IP address of the translated IPv4 packet to the last 32 bits of the destination IP address of the IPv6 packet.

Note: This feature is not supported for Citrix Gateway configuration and, content switching and cache redirection load balancing configurations.

Configuration Steps

Configuring USIP for a v4-to-v6 load balancing configuration consists of the following tasks:

Add global USIP NAT prefix. It is a global IPv6 prefix of length 32/40/48/56/64/96 bits to be configured on the appliance.
Enable global USIP mode. For more information, see Enable Use Source IP Mode.
Enable USIP mode for load balancing services. For more information, see Use source IP address of the client when connecting to the server.

To add a global USIP NAT prefix by using the CLI:

set ipv6 -usipnatprefix <prefix/prefix_length>
show ipv6

To add a global USIP NAT prefix by using the GUI:

Navigate to System > Network, and click Change IPv6 Settings.
On the Configure Configuration for IPV6 screen, set the USIP NAT Prefix parameter.

Sample configuration

> set ipv6 -usipnatprefix 2001:DB8:90::/64
Done

> enable ns mode USIP
Done

> add lb vserver LBVS-1 HTTP 203.0.113.90 80
Done

> add service SVC-1 2001:DB8:5001::30 HTTP 80 -usip yes
Done

> add service SVC-2 2001:DB8:5001::60 HTTP 80 -usip yes
Done

> bind lb vserver LBVS-1 SVC-1
Done

> bind lb vserver LBVS-1 SVC-2
Done

<!--NeedCopy-->

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Use client source IP address for backend communication in a v4-v6 load balancing configuration

August 20, 2024

Contributed by:

C C S

August 20, 2024

Contributed by:

C C S

Use client source IP address for backend communication in a v4-v6 load balancing configuration

Configuration Steps

Sample configuration

In this article