irules - reverse proxy with x-forwarder for http

Question

Hi
can someone help to write multiple conditional statements in one if statement. Basically I'm trying to club the reverse proxy iRule for Lync and iRule to insert the original client IP address in an X-Forwarded-For HTTP header. I'm poor in writing irules. can someone help with basics and let me know what is going wrong if I use the following  irule. 
the requirement : The rule should act as reverse proxy and server should log with the original client Ip address instead of LTM's self IP address as I have SNAT automap enabled. 
when HTTP_REQUEST {
 ([HTTP::header] insert X-Forwarded-For [IP::remote_addr]) and ([HTTP::uri] contains "WebTicket/WebTicketService.svc/Auth") } {
  switch [string tolower [HTTP::host]] {

tokyo.lync4u.com { pool pool_test_lync13 }
      }
   }
}
Its throwing me errors, I tried to work. but as I have less knowledge on irules, I want some assistance from you guys. 
can someone try to amend the irule for me so that

cory_50405 · Answer

You can enable the insertion of the X-forwarded-for header in the HTTP profile you have applied to your virtual server. Is there a reason you need to do it through an iRule instead of the HTTP profile?

newf5learner · Answer

though I have enabled that in http profile, logging at the server end doesn't give me any information about the client IP addresses, I can only see the LTM self IP addresses.

kunjan_118660 · Answer

Have you configured the web server to log "X-forwarded-for" header? Something like this&nbsp;

kunjan · Answer

Have you configured the web server to log "X-forwarded-for" header? Something like this&nbsp;

cory_50405 · Answer

You can verify it's being inserted by doing a tcpdump on the LTM and digging into the HTTP information being sent to the server.

Forum Discussion

irules - reverse proxy with x-forwarder for http

7 Replies

Recent Discussions

google autenticator broken barcode

Error while running ansible

ASM instance creation

[ASM] - what is "Browser Challange file" ?

[ASM] - HTML5 Cross-Domain Request Enforcement - CLI command

Related Content

X-Forwarded-For on L4 VS

TCP Option 28 X-Forwarded-For Header

iRule for AFM IP Intelligence security policy to work with HTTP XFF (X-Forwarded-For) headers

Restricting Access to Virtual from client IP address in X-Forwarder-For HTTP header

X Forwarded For Single Header Insert