For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ScottG_33396's avatar
ScottG_33396
Icon for Nimbostratus rankNimbostratus
Nov 30, 2006

get and replace

OK all you gurus. Here's what i want to do. I want to get data from http::header "X-Forwarded-For" and replace the data in client_addr with what I get from X-Forwarded-For. I need to grab th IP found ...
application delivery
dev
devops
iRules
Deb_Allen_18's avatar
Deb_Allen_18
Historic F5 Account
Dec 05, 2006
I think what Aaron is suggesting is using the SNAT command to change the source IP to the value of the XFF header:
when HTTP_REQUEST {
  snat [HTTP::header "X-Forwarded-For"]
}
Interesting idea. If default routing will ensure an appropriate return path, it may work, but could instead result in broken conversations if the source NAT is in place to force return through a specific upstream device.

HTH

/deb