Forum Discussion
Jeremy_Alons_40
Nimbostratus
Aug 06, 2009matchclass and custom header values
Greetings,
I'm inserting true-client-ip (forwarded from Akamai to show us the actual client's IP address, not Akamai's edge server that's servicing the request) via an iRule:
...
hoolio
Cirrostratus
Aug 06, 2009TCL isn't really a strongly typed language, so you can use the string from the header value output to compare with the address type datagroup.
Are you using the two iRules together? If so, you're overwriting the XFF and true-client-ip header values with the actual IP address LTM sees in the TCP connection. If that's not the case, try logging the header value and the banned_ip_addresses class in the rule. If it's still not clear, try posting the anonymized log output.
Aaron
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects