Forum Discussion

AnupamG_354580's avatar
AnupamG_354580
Icon for Nimbostratus rankNimbostratus
Jul 09, 2018

authorization header are dropped

Hello Folks , i have two VIP configured , One for PROD and one for UAT . in UAT when i insert any authorization header it gets dropped but PROD is OK

 

Below are xforward configured . I want to understand difference between these two

 

for UAT when HTTP_REQUEST { set xforward [HTTP::header values X-Forwarded-For] if {[HTTP::header exists X-Forwarded-For]}{ HTTP::header insert X-Forwarded-Received $xforward HTTP::header remove X-Forward-For HTTP::header insert X-Forwarded-For [IP::client_addr] } else { HTTP::header insert X-Forwarded-For [IP::client_addr] } }

 

for PROD

 

when HTTP_REQUEST { if {[HTTP::header exists X-Forwarded-For]}{ HTTP::header replace X-Forwarded-For "[HTTP::header X-Forwarded-For], [IP::client_addr]" } else { HTTP::header insert X-Forwarded-For [IP::client_addr] } }

 

application delivery
iRules
  • Faruk_AYDIN's avatar
    Faruk_AYDIN
    Icon for Altostratus rankAltostratus
    Jul 09, 2018

    Hi Guy,

    1. There is some problems. In UAT, 
    HTTP::header remove X-Forward-For
    line may include misspelling. Correct version must be: 
    HTTP::header remove X-Forwarded-For

    2. In UAT, if X-Forwaded-For header exists, then new X-forwarded-for header is added. (In the if statement, 
    HTTP::header insert X-Forwarded-For [IP::client_addr]
    )

    3.In UAT, and PROD if X-Forwaded-For header does not exist, then a X-forwarded-for header is added. (In the else statements, 
    HTTP::header insert X-Forwarded-For [IP::client_addr]
    )

    4. In PROD if X-Forwaded-For header exists, then Client IP is added into the existing X-forwarded-for header . (In the if statement, 
    HTTP::header replace X-Forwarded-For "[HTTP::header X-Forwarded-For], [IP::client_addr]"
    )
  • youssef1's avatar
    youssef1
    Icon for Cumulonimbus rankCumulonimbus
    Jul 09, 2018

    Hi,

    to sum UP:

    In UAT if "X-Forwarded-For" exist you add an additional value using this command (and even if this header don't exist you insert X-Forwarded-For header in else condition):

    HTTP::header insert X-Forwarded-For [IP::client_addr]

    In production you check if "X-Forwarded-For" header exist, if yes you replace value by:

    HTTP::header replace X-Forwarded-For "[HTTP::header X-Forwarded-For], [IP::client_addr]"

    but you made a mistake you forget values in command:

    HTTP::header replace X-Forwarded-For "[HTTP::header values X-Forwarded-For][IP::client_addr]"

    So modify text your irule production by:

    when HTTP_REQUEST { 
if {[HTTP::header exists X-Forwarded-For]}{
    HTTP::header replace X-Forwarded-For "[HTTP::header values X-Forwarded-For], [IP::client_addr]" 
} else { 
HTTP::header insert X-Forwarded-For [IP::client_addr] 
}

    Keep me update.

    regards