Alternative to getfield to check XFF client IP using data group

Hi All,

Can anyone please help resolve this? I have tried the recommendation that Kevin suggested, however I am not sure if I am doing it correctly as it does not seem to work.

Here is the old code that was working on 12.x code, but after upgrading to 13.x, it no longer works...

F5, can you help with this here? How to change this so with version 13.x it is able to look/compare the client XFF IP against the data group and allow/deny/redirect based on that..

**** Original code with getfield that looks at the client IP address in the XFF header, if it does not match the IP address listed in the "DG-ALLOWED-IP" data group, and the user tries to access the URIs listed in the "DG-ALLOWED-URI-LIST", they will get dropped...The switch command is also used for access and redirect based on the match in the "DG-ALLOWED-IP" data group..

when HTTP_REQUEST {
if { [active_members POOL-WEBSERVERS] < 1 } {
HTTP::redirect " http://maintenance.mysite.com" 
    } else { 
 
set CHECK_IP [getfield [HTTP::header values X-Forwarded-For] " " 1]
 if { !([class match $CHECK_IP eq DG-ALLOWED-IP]) } {
     if { [class match [HTTP::uri] eq DG-ALLOWED-URI-LIST] } {
            reject 
             }
          }
          switch -glob [HTTP::uri] {
         "*/abc/portal1/idtrack*" -
         "*/cde/portal2/idtrack2*" -
         "*/fgh/abc/portal3/idtrack*" {
          if { ([class match $CHECK_IP eq DG-ALLOWED-IP]) } {
			if { [HTTP::uri] contains "/public/idtracker" } {
				HTTP::redirect "https://[HTTP::host]/secure/idtracker"
			} else {
          HTTP::redirect "https://[HTTP::host]/login2/public/idtracker/" 
   	   }
	 }
       }
    }
  }
}