X-Forwarded-For iRule

Question

We are having problem where the ‘X-Forwarded-For’ header is missing when traffic is coming through the Load Balancer.&nbsp;
It has been working previously, but looking at what is coming back from the load balancer in the error logs. I can see this ‘X--------------: xxxxxxxxxxx’ which might mean that something is broke on the load balancer and it should be ‘X-Forwarded-For: IP ADDRESS’?&nbsp;
Has anyone else experienced similar?&nbsp;
We've enabled "Insert X-Forwarded-For" on the http profile. &nbsp;

rodrigo_albuque · Answer

I believe you need to pick one, either the iRule or enable insert-xforwarded-for in HTTP profile settings. Try removing the iRule and leaving just the HTTP profile option. It worked for me here in my lab. If you need help with the iRule you need to post the iRule you're using.

cymru81 · Answer

sorry im not clear but we dont have an irule for this currently just http profile setting.  what should we try next?&nbsp;

rodrigo_albuque · Answer

Well, the X-Forwarded-For setting is supposed to work out of the box. I've tested myself in my lab here and it works. You should post the output of your HTTP profile configuration:&nbsp;
 tmsh list ltm profile http  &nbsp;
As well as the configuration of the virtual server you attached it to &nbsp;
 tmsh list ltm virtual &nbsp;
And lastly take a sample packet capture on tmm (0.0) interface using a sample client of your choice:&nbsp;
 tcpdump -i 0.0:nnnp -s0  -w /shared/tmp/xforwarded-test-v1.pcap -v&nbsp;
Community members might try to help you here but if it gets too complicated I'd advise you to open a case with F5 support as they can request a snapshop of your configuration (called qkview) and have a more thorough view of your system.&nbsp;
Regards,
Rodrigo&nbsp;

cymru81 · Answer

Removing the irule made no difference, do i need to do anything in IIS?

Forum Discussion

X-Forwarded-For iRule

4 Replies

Recent Discussions

BIG-IP DNS: Check Status Of Multiple Monitors Against Pool Member

Open Redirection Mitigation

F5Access | MacOS Sonoma

enable tls1.2 on management interface on F5 ltm running version 10.x

[ASM] - what is "Browser Challenge file" ?

Related Content

iRule for AFM IP Intelligence security policy to work with HTTP XFF (X-Forwarded-For) headers

TCP Option 28 X-Forwarded-For Header

X-Forwarded-For on L4 VS

Restricting Access to Virtual from client IP address in X-Forwarder-For HTTP header

X-Forwarded-For Log Filter for Windows Servers