Forum Discussion

vikas_Patil's avatar
vikas_Patil
Icon for Nimbostratus rankNimbostratus
Dec 26, 2022

Bypass WAF for X-forwarder IP in XC

We use the F5 XC and want to bypass the WAF rules if traffic comming from specific IP address in X-forwarder-for field, X-forwarder-for Field contail Multiple IP address and if any of the IP matches...
vikas_Patil's avatar
vikas_Patil
Icon for Nimbostratus rankNimbostratus

Actually we want to do it on WAAP, and Irule option is not available

Nikoolayy1's avatar
Nikoolayy1
Icon for MVP rankMVP
Jan 14, 2023

vikas_Patil  did you manage to make this work?

Maybe to match a specific ip address when there are many in the HTTP XFF header you can use regex. To match a single IP address you can try the regex (1\.1\.1\.1)  where 1.1.1.1 is the IP address and soon I will publish an F5 community article about this as I played with the feature a little.