For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

yuanqiang_22112's avatar
yuanqiang_22112
Icon for Nimbostratus rankNimbostratus
Jul 13, 2016

Irules for tcp option

  scenario: F5 to load balance for mysql database,f5 set the automap function,The user needs to see the client's real IP ; solove : I create the irules to insert client true ip ,but when I ...
application delivery
iRules
LTM
Hamish's avatar
Hamish
Icon for Cirrocumulus rankCirrocumulus
Jul 13, 2016

Hi.

 

Looks to me like you're using the wrong example code. If I read your description correctly, you want to INSERT the client IP into the connection so the backend (mysql) can read it? However you're using the example iRule that GETS the option28 information and displays it on the client-side of the connection.

 

The code to SET the option is documented as

 

when SERVER_CONNECTED {
  scan [IP::client_addr] {%d.%d.%d.%d} a b c d
  TCP::option set 29 [binary format cccc $a $b $c $d] all
}

You still have to get mysql to read and process that inserted option information of course.