For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ismail2's avatar
ismail2
Icon for Nimbostratus rankNimbostratus
Jun 29, 2020

BotDefense XFF when using CDN

I am having trouble with Bot-Defense detecting the client_ip (XFF) when using cloudflare.   The ASM Profile is working fine when i add custom header and enable X-Forwarded-For although the BotDef...
ASM Advanced WAF
BIG-IP
security
Emil's avatar
Emil
Icon for Altocumulus rankAltocumulus
Sep 19, 2022

I am having the same issue. Did you manage to fix it? In my case I have CloudFlare CDN in front of the f5 AWAF.

What is the best implementation in this setup?

1. CF is considered as upstream proxy and set HTTP profile with trust XFF

2. Use irule to change cloudflare headers into XFF; X-real-ip. Botdefense seems to match cloudflare as a malicious bot.

I will appreciate any advise and assisstance.

Thanks.