For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

mtobkes_64700's avatar
mtobkes_64700
Icon for Nimbostratus rankNimbostratus
Mar 11, 2010

Can iRule Reject Requests Based on 'True-Client-IP'

Can someone please tell me if the LTM v9.4.7 can take action on requests, based on the HTTP header value for 'True-Client-IP'?     We will be 'Akamaizing' parts of our website and will no l...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Mar 11, 2010
That looks good. For 9.4.4+ you can remove the $:: prefix from the datagroup to make the iRule CMP compatible (assuming you have a CMP compatible platform Click here).

 

 

I'd be careful using a 301 response as intermediate proxies could cache the response and serve it to clients who would have otherwise been allowed through to the pool. A 302 shouldn't be cached and still allows you to redirect the client to a new location.

 

 

Aaron