For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Eduardo_SCR_151's avatar
Eduardo_SCR_151
Icon for Nimbostratus rankNimbostratus
Jan 09, 2017

Internal IP shown in http redirects

Hello. We have seen that with our configuration it is possible to gather the internal VIP address. This happens when the clients sends a request with the host header empty, and the real server answer...
application delivery
LTM
Vijay_E's avatar
Vijay_E
Icon for Cirrus rankCirrus
Jan 10, 2017

I am not sure if there is a way to prevent it in the response. You can drop any such request without HTTP host header using iRule.