This message was deleted.

There's a lot of layers where this could get blocked or just dropped. Your http server should be looking at the X-Forwarded-For header because the traffic will all come from the Harvester IPs and the VIP. If you need to block webtraffic you're gonna need to probably do it via those headers and not source traffic. Depending on how your VM networks are set up in conjunction with the mgmt networks using the LB that's built into harvester may, or may not be possible.

The

X-Forwarded-For

header appears to be empty via a harvester LB on my setup, at least that's what my test python app indicates.