F5 XC WAF requirement is to allow traffic from specific source site on downstream and upstream side.

Question

We want to allow traffic from CHE and MUM site only at downstream connectivity and also at upstream connection should be from same sites only. As over firewall we allowed traffic from F5 ASIA regions IP only.

Downstream: As we have specific VIP IP, if we made same changes in VIP Advertisement does it pass only through MUM and CHE, as VIP belongs to ASIA region only.

Upstream: We allowed traffic through Specific Virtual Site from INDIA only in Origin Server so it will help us to pass traffic through this site towards server.

sstockert · Answer

A few sources to achieve Regional Edge ingress and egress pinning.
F5 Distributed Cloud - Regional Decryption with Virtual Sites
F5 Distributed Cloud - Regional Edge Health Monitoring Insights
F5 Distributed Cloud: Virtual Sites - Regional Edge (RE)

nikoolayy1 · Answer

Better use the same Virtual Site for the dedicated IP on HTTP LB and also on the Origin Server in the Origin Pool from my experience that is limited only to Asia but keep mind I think that there are more than 2 RE that are part of the Asia region. Better use ves io country to limit it only to India when making the Virtual Site.
&nbsp;
F5 Distributed Cloud - Regional Edges – F5 Distributed Cloud Services (zendesk.com)

Forum Discussion

F5 XC WAF requirement is to allow traffic from specific source site on downstream and upstream side.

Recent Discussions

cache size and timeout ssl client profile for 1 million tps

APM subsession variables disappear before session is terminated

Is network access bypassing APM logon pages?

Problems connecting to vpn after upgrading to ubuntu 24.04

ACCESS::session set variables are displayed as garbled characters

Related Content

Reminder: MFA now required to log in to DevCentral

DevCentral to Require Multi-Factor Authentication for Account Login from September 26

API Security requirement?

F5 BIG-IP Sizing Requirement

Disabling Specific Weak Cipher Suites