For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Saad_Deif's avatar
Saad_Deif
Icon for Nimbostratus rankNimbostratus
Nov 23, 2025

AFM Logging Proxy Protocol Header Sent by F5 XC

Hello, We are using F5 distributed cloud XC DDOS service for our published services in proxy mode all traffic coming to F5 BIG-IP AFM sourced from XC IP ranges, at the same time XC is inserting "PRO...
application delivery
cloud
security
Nikoolayy1's avatar
Nikoolayy1
Icon for MVP rankMVP
Dec 03, 2025

Aren't you using the irule Proxy Protocol Receiver | DevCentral ? You can log the variables that have the real IP address and if you need help XC has https://www.f5.com/products/ai-assistant that can help you do it faster.

 

You need to still have layer 3/4 VIrtual server as if you are using something like virtual wire see Virtual-wire Configuration and Troubleshooting | DevCentral and my comment as "vlangroup.forwarding.override" is needed so you layer 3 wildcard to capture the traffic and not the pre-build  internal virtual servers.