For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JRahm's avatar
JRahm
Icon for Admin rankAdmin
Dec 05, 2022

Coding Live: Policies & iRules - Dec 8, 2022

Policies and iRules. iRules and policies. Usage can be either/or OR both/and, but where do you draw the lines of operational control? Join Jason at 10:45 pacific time on Thursday, December 8, 2022 to...
devops
Kai_Wilke's avatar
Kai_Wilke
Icon for MVP rankMVP
Dec 08, 2022

Who catches the flaw in this X-Forwarded-For protection Jason just has shown us?

Cheers, Kai

JRahm's avatar
JRahm
Icon for Admin rankAdmin
Dec 08, 2022

the wonky capitalization within, you mean?

  • Kai_Wilke's avatar
    Kai_Wilke
    Icon for MVP rankMVP
    Dec 08, 2022

    in LTP a header-replace has same problems as [HTTP::header replace] in iRule. If user-agent sends 2 header instances, only one instance gets replaced in the request. For a X-Forwarded-For protection this is obviously not the right way to do it... 

    Cheers, Kai