Forum Discussion

chanokkim's avatar
chanokkim
Icon for Nimbostratus rankNimbostratus
Apr 11, 2025

f5 AI Gateway pii-redactor not working

I am testing Ai Gateway by looking at NGINX Modern Apps Docs. I have verified that OWASP LLM 01, 07 are working, but 02 Sensitive Information Configuration does not seem to be working. The demo video also contains Sensitive Information related content.

how config Sensitive Information masking for ai gateway?

https://clouddocs.f5.com/training/community/nginx/html/class15/module6/module6.html

 

AI Gateway Demo Video

 

 

The processor's log looks like this:

 

{"time":"2025-04-11T00:55:04.71766415Z","level":"ERROR","msg":"applying config to component failed, rolling back","error":"failed to check processors: failed to fetch parameters for processor pii-redactor: unable to fetch parameters from url: http://aigw-processors-f5.devopschan.svc.cluster.local/api/v1/signature/f5/pii-redactor, got status: 404"}
2025/04/11 00:55:04 WARN will retry config apply in 5s (1 of 3)
{"time":"2025-04-11T00:55:05.368088471Z","level":"INFO","msg":"successfully reported usage data"}
{"time":"2025-04-11T00:55:09.767886333Z","level":"ERROR","msg":"applying config to component failed, rolling back","error":"failed to check processors: failed to fetch parameters for processor pii-redactor: unable to fetch parameters from url: http://aigw-processors-f5.devopschan.svc.cluster.local/api/v1/signature/f5/pii-redactor, got status: 404"}
2025/04/11 00:55:09 WARN will retry config apply in 5s (2 of 3)
{"time":"2025-04-11T00:55:14.817815787Z","level":"ERROR","msg":"applying config to component failed, rolling back","error":"failed to check processors: failed to fetch parameters for processor pii-redactor: unable to fetch parameters from url: http://aigw-processors-f5.devopschan.svc.cluster.local/api/v1/signature/f5/pii-redactor, got status: 404"}

 

 

configuration file :

 

...

 

    responseStages:
      - name: protect
        steps:
          - name: pii-redactor

 

...

 

  - name: pii-redactor
    type: external
    config:
      endpoint: http://aigw-processors-f5.devopschan.svc.cluster.local
      namespace: f5
      version: 1
    params:
      threshold: 0.2 # Default 0.2
      allow_rewrite: true # Default false
      denyset: ["EMAIL","PHONE_NUMBER","STREETADDRESS","ZIPCODE"]

 

...

 

 

thank you.

1 Reply

  • Better maybe chase support as this is new F5 product and many have not implemented this for customers including me. You can then share what support provided as a solution in the forum to help other.