F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Ganesh_Garg's avatar
Ganesh_Garg
Icon for Nimbostratus rankNimbostratus
Dec 08, 2016

Actual Client IP and Proxy IP in X-Forwarded-For

We have a setup where clients are behind proxy and proxy is the src-ip for LTM, we have enabled X-Forwarded-For and we are getting Proxy-IP in the header, but now the requirement is to have actual cl...
application delivery
devops
iRules
LTM
Kai_Wilke's avatar
Kai_Wilke
Icon for MVP rankMVP
Dec 21, 2016

Hi Ganesh,

I've just checked the provided iRule and it works for me. Please use the iRule below to troubleshoot the issue and post back the resulting logs...

when HTTP_REQUEST {

    log local0.debug "Orig XFF: [HTTP::header values "X-Forwarded-For"]"

    if { [set x_forwarded [HTTP::header values "X-Forwarded-For"]] ne "" } then {
        HTTP::header remove "X-Forwarded-For" 
        HTTP::header insert "X-Forwarded-For" "[join $x_forwarded ", "], [getfield [IP::client_addr] "%" 1]"
    } else {
        HTTP::header insert "X-Forwarded-For" "[getfield [IP::client_addr] "%" 1]"
    }

    log local0.debug "New XFF: [HTTP::header values "X-Forwarded-For"]"

}

Note: Also make sure, the 

Insert X-Forwarded-For
option of your attached HTTP profile is set to 
disable
.

Cheers, Kai