Forum Discussion

oogabooga_13071's avatar
oogabooga_13071
Icon for Altocumulus rankAltocumulus
Dec 19, 2017

Does the Visual Policy Editor in APM only have visibility of session variables?

I am unable to parse an X-Forwarded-For header into the VPE directly using VPE tools like Variable Assign and MessageBox.

I can do it by setting the custom session variable in an iRule like below;

when ACCESS_SESSION_STARTED {
ACCESS::session data set session.custom.actualclientip [HTTP::header values X-Forwarded-For]
}

However I would prefer to use the VPE as it is much easier/cleaner to use and troubleshoot. Is the functionality there and am I just stuffing up the syntax?

application delivery
BIG-IP Access Policy Manager (APM)
iRules
security
  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Dec 19, 2017

    You can use following command in bash 

    sessiondump -allkeys

    it will display all available variables.

    there is no variable containing X-Forwarded-For header.

    So the only solution is to do it within the irule, and the event ACCESS_SESSION_STARTED is the best one.