For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

dtroszczynski's avatar
dtroszczynski
Icon for Nimbostratus rankNimbostratus
May 22, 2019

Fast L4 profile with xff LTM

Hello,

 

I have a layer 4 on F5 VS. I have set the FastL4 profile and HTTP profile as below:

 

ltm profile http HTTP_XforF {

 

 accept-xff disabled

 

 app-service none

 

 defaults-from http

 

 encrypt-cookies none

 

 enforcement {

 

  max-header-count 64

 

  max-header-size 32768

 

  max-requests 0

 

  pipeline allow

 

  unknown-method allow

 

 }

 

 fallback-host none

 

 fallback-status-codes none

 

 header-erase none

 

 header-insert none

 

 insert-xforwarded-for enabled

 

 lws-separator none

 

 lws-width 80

 

 oneconnect-transformations enabled

 

 proxy-type reverse

 

 redirect-rewrite all

 

 request-chunking preserve

 

 response-chunking selective

 

 response-headers-permitted none

 

 via-request preserve

 

 via-response preserve

 

 xff-alternative-names none

 

 

 

Additionally, I have 2 irule connected:

 

 

 

when HTTP_REQUEST {

 

HTTP::header insert x-forwarded-host [HTTP::host]

 

}

 

 

 

when HTTP_REQUEST {

 

HTTP::header insert x-forwarded-proto "https"

 

}

 

 

 

VS listens on port 443. The certificate is on the server for F5. When you try to call a host, the site is unreachable, only after a few re-invitations the site enrols the certificate and everything starts working.

When I omit F5 in communication, everything works without a problem. F5 is transparent in this case and should not cause a problem. What could be the cause of the problem?

No RepliesBe the first to reply