Forum Discussion

JRahm's avatar
JRahm
Icon for Admin rankAdmin
Dec 05, 2022

Coding Live: Policies & iRules - Dec 8, 2022

Policies and iRules. iRules and policies. Usage can be either/or OR both/and, but where do you draw the lines of operational control? Join Jason at 10:45 pacific time on Thursday, December 8, 2022 to...
devops
Kai_Wilke's avatar
Kai_Wilke
Icon for MVP rankMVP

Who catches the flaw in this X-Forwarded-For protection Jason just has shown us?

Cheers, Kai

JRahm's avatar
JRahm
Icon for Admin rankAdmin
Dec 08, 2022

the wonky capitalization within, you mean?

  • Kai_Wilke's avatar
    Kai_Wilke
    Icon for MVP rankMVP
    Dec 08, 2022

    in LTP a header-replace has same problems as [HTTP::header replace] in iRule. If user-agent sends 2 header instances, only one instance gets replaced in the request. For a X-Forwarded-For protection this is obviously not the right way to do it... 

    Cheers, Kai