Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Saad_Deif's avatar
Saad_Deif
Icon for Nimbostratus rankNimbostratus
Nov 22, 2025

AFM Logging Proxy Protocol Header Sent by F5 XC

Hello, We are using F5 distributed cloud XC DDOS service for our published services in proxy mode all traffic coming to F5 BIG-IP AFM sourced from XC IP ranges, at the same time XC is inserting "PRO...
application delivery
cloud
security
Nikoolayy1's avatar
Nikoolayy1
Icon for MVP rankMVP
Dec 02, 2025

Aren't you using the irule Proxy Protocol Receiver | DevCentral ? You can log the variables that have the real IP address and if you need help XC has https://www.f5.com/products/ai-assistant that can help you do it faster.

 

You need to still have layer 3/4 VIrtual server as if you are using something like virtual wire see Virtual-wire Configuration and Troubleshooting | DevCentral and my comment as "vlangroup.forwarding.override" is needed so you layer 3 wildcard to capture the traffic and not the pre-build  internal virtual servers.