For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

no-idea-what-im's avatar
no-idea-what-im
Icon for Nimbostratus rankNimbostratus
Jul 02, 2014

Exponential backoff iRule and True-Client-IP HTTP header

Hi,   I am working on using the exponential backoff iRule (https://devcentral.f5.com/wiki/irules.POST-Request-Exponential-Backoff.ashx) to help with some suspicious login attempts.   The issue I ...
application delivery
devops
iRules
LTM
security
nitass_89166's avatar
nitass_89166
Icon for Noctilucent rankNoctilucent
Jul 03, 2014

set static::session_id "$trueclientip"

set static::state_table "[virtual name]-exp-backoff-state"

i do not think static global variable should be used especially for session_id. as Kevin mentioned, they should be just regular variable instead.

A namespace for creating global variables to hold constant values in a CMP-compatible fashion. This namespace is intended only for use with values that will not change. While it is possible to alter the value of a global variable in the static namespace, this value will not be propagated to other CMP nodes in the system. Therefore, doing so may lead to unexpected results.

static wiki

https://devcentral.f5.com/wiki/iRules.static.ashx
  • no-idea-what-im's avatar
    no-idea-what-im
    Icon for Nimbostratus rankNimbostratus
    Jul 03, 2014
    As I mentioned, I am not much of a coder and new to iRules on top of that. Can you point me to an example of how to write that as a regular variable? Would it be something as simple as set session_id "$trueclientip" ? I am basically reusing the code from the exponential backoff example that was given and that static global variable is what was in the example. Thank you again.