For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

mbrunyak1's avatar
mbrunyak1
Icon for Nimbostratus rankNimbostratus
Jun 24, 2022
Solved

iRule

I have the below http iRule. Moving url to https and need to convert iRule for https use.   when HTTP_REQUEST { if {[HTTP::header X-Forwarded-For] != ""} then { persist uie [lindex [ split [linde...
application delivery
  • Sebastiansierra's avatar
    Sebastiansierra
    Jun 24, 2022

    You can see more info about the HTTP header X-Forwarder-For in this link:

    https://support.f5.com/csp/article/K4816

    Did you receive any error in /var/log/ltm when you try to access the new url ?

    In SSH execute

    tailf /var/log/ltm and test the application

Sebastiansierra's avatar
Sebastiansierra
Icon for MVP rankMVP
Jun 24, 2022

Hi,

Did you test the irule in the new HTTPS URL? basically, the irule persists the IP using the x-forwarder-for header or the client_addr in the case the X-forwarder-for is not present, and this keep as HTTP no HTTPS because is a header in the packet, so this irule works without any modification.

mbrunyak1's avatar
mbrunyak1
Icon for Nimbostratus rankNimbostratus
Jun 24, 2022

Thank you. Yes I did test and it wasn't working. I thought maybe I had to modify for HTTPS

  • Sebastiansierra's avatar
    Sebastiansierra
    Icon for MVP rankMVP
    Jun 24, 2022

    You can see more info about the HTTP header X-Forwarder-For in this link:

    https://support.f5.com/csp/article/K4816

    Did you receive any error in /var/log/ltm when you try to access the new url ?

    In SSH execute

    tailf /var/log/ltm and test the application

    • mbrunyak1's avatar
      mbrunyak1
      Icon for Nimbostratus rankNimbostratus
      Jun 24, 2022

      Thanks. I don't get any output from tailf /var/log/ltm