Forum Discussion

wixxyl_98682's avatar
wixxyl_98682
Icon for Nimbostratus rankNimbostratus
Aug 24, 2012

X-Forwarded-for information

All,

 

 

Looking for some help and understanding on the x-forwarded-for option. I'm running Big-IP LTM 11.2.0 on a 6900 platform. I've gotten the x-forwarded-for option set up as a profile on the virtual servers, that's working fine. But, my supervisor has asked me if there is an option for x-forwarded-proto, as the system we are balancing will not allow certain features to work if the traffic isn't coming across https, and of course, it isn't because the f5 is sitting in the middle doing SSL offloading. Is there any way to set the x-forwarded-proto up, or am I out of luck? I found an iRule to do it, but I'd rather do it as an option alongside the x-forwarded-for so I won't have to remember to set that up every time. Any help is appreciated.

 

 

Thanks

 

management
monitoring

2 Replies

Sort By
  • hooleylist's avatar
    hooleylist
    Icon for Cirrostratus rankCirrostratus
    Aug 25, 2012
    Hi,

     

     

    See this post for a method for removing/inserting an x-forwarded-proto header with custom HTTP profiles:

     

     

    https://devcentral.f5.com/Community/GroupDetails/tabid/1082223/asg/50/aft/26643/showtab/groupforums/Default.aspx

     

     

    Aaron
  • wixxyl_98682's avatar
    wixxyl_98682
    Icon for Nimbostratus rankNimbostratus
    Aug 27, 2012
    Sweet, thanks a lot Hoolio! That's exactly what I was looking for. Just to clarify from the article, I can go to my X-Forwarded-For profile, select "Request Header Insert" and type in x-forwarded-proto:"https" and that should do it? Is the "Request Header Erase" option necessary, and do I just leave it blank in the line right after? I'm unclear on the syntax to put into the line after the header insert, but that seems to be how it's worded to me. Thank you again, that was exactly what I needed.