For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Anish_5238's avatar
Anish_5238
Icon for Nimbostratus rankNimbostratus
Oct 19, 2007

iRule for REMOTE_ADDR

Hello     We are using the BigIP in an Auto_map SNAT configuration and in this case the REMOTE_ADDR of the client is replaced by the IP of the BigIP in the webserver logs.     I understand...
application delivery
dev
devops
iRules
Anish_5238's avatar
Anish_5238
Icon for Nimbostratus rankNimbostratus
Oct 22, 2007
Hello Aaron and thank you for your response. To answer your questions, firstly, the pool members are not using the F5 as the default gateway and they are connected over a VPN. I have to use SNAT "auto map" for the configuration to work.

 

 

The backend servers have some controls which utilise the "REMOTE_ADDR" variable to process some checks. I am able to enable XFF in the http profile and use the "HTTP_X_FORWARDED_FOR" variable instead of "REMOTE_ADDR" to achieve the desired results. However, I will have to make changes across 25 webservers. It would be great if I can just put an iRule which replaces "REMOTE_ADDR" with "HTTP_X_FORWARDED_FOR" and that is transparent to IIS and the custom application. That way, I simply avoid re-configuration headaches.

 

 

Let me know if that is possible.

 

 

Thanks again,

 

Anish