Forum Discussion
Accept XFF on HTTP Profile Behaviour
Hi Team,
I need a little help from you to get a bit understanding about a function Accept XFF in the HTTP Profile.
If the incoming traffic to the F5 VS is coming with a XFF header appended like XFF_HEADER=10.10.10.10 20.20.20.20.
If the accept XFF feature enabled on http profile ,does the VIP forward only one ip address from it to the back end once the traffic are send ? say the back end application will see only 10.10.10.10 ?
If so how does the algorithm works ?
ltm profile http http_XFF {
accept-xff enabled
app-service none
defaults-from http
enforcement {
known-methods { CONNECT DELETE GET HEAD LOCK POST PROPFIND PUT UNLOCK }
unknown-method reject
}
insert-xforwarded-for disabled
oneconnect-transformations disabled
proxy-type reverse
redirect-rewrite matching
}
- Dario_Garrido
Noctilucent
Accept XFF is only for monitoring purposes, F5 doesn't modify 'X-Forwarded-For' header in this case.
REF - https://support.f5.com/csp/article/K40243113
KR, Dario.
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com