For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Injazat-SOC's avatar
Injazat-SOC
Icon for Nimbostratus rankNimbostratus
Jan 23, 2020

F5 Proxy protocol irule support

One of our service is hosted in Cloudflare which is redirecting the request to our F5 LTM where the actual service is hosted. By default when the request coming from cloudflare it is not sending the...
application delivery
BIG-IP
iRules
Injazat-SOC's avatar
Injazat-SOC
Icon for Nimbostratus rankNimbostratus
Jan 29, 2020

Yes, with no proxy the service works.

We do have http profile applied in that VS with

X-forward enabled,

redirecr-rewrite: matching and

HTTP strict transport security : enabled

boneyard's avatar
boneyard
Icon for MVP rankMVP
Jan 29, 2020

is there a chance to have cloudflare talk unencrypted to your BIG-IP as a test. then you could easier packet capture.

 

you can try to print the TCP payload which should contain the word proxy, i.e. [TCP::payload 0 5] in your allowed despite lack of ... section.