Forum Discussion
kuldeep7985
Nimbostratus
NimbostratusF5-ASM
I want to accomplish a task where I have a VS with the address 10.8.25.164, and the host address is 10.8.25.121. Is it possible to replace the host IP address with the X-Forwarded-For IP address, which is 82.200.247.241?" also I have a snap --
- whisperer
MVP
I would use an iRule:
https://community.f5.com/discussions/technicalforum/help-with-x-forwarded-for-irule/23894
Alternatively, you can use a Local Traffic Policy (scroll to the bottom):
- Ismael_Goncalves
Employee
I think what you are looking is to consider the IP inside the X-FF header the client IP. In order to make the WAF to trust that header you need to modify the ASM policy to "trust" x-forwarded-for header. You can enable this feature in the Configuration utility by selecting the Trust XFF Header check box in the security policy properties advanced configuration settings.
Overview of the Trusted X-Forwarded-For header (f5.com)
