Forum Discussion

Kevin_Nail's avatar
Kevin_Nail
Icon for Nimbostratus rankNimbostratus
Jan 15, 2009

Multiple XFF headers

We have a situation where it may be possible for one LTM to insert the XFF and load-blance the packets to another LTM with another XFF set.     I would like to have an iRule the checks for ...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Jan 16, 2009
I assume you've disabled XFF on the HTTP profile on the second set of LTM's?

You could also try logging what's happening: 

 
 when HTTP_REQUEST { 
    if {[HTTP::header exists "X-Forwarded-For"]}{ 
        Do nothing 
       log local0. "[IP::client_addr]:[TCP::client_port]: Existing XFF: [HTTP::header values "X-Forwarded-For"]" 
    } else { 
       HTTP::header insert "X-Forwarded-For" [IP::client_addr] 
       log local0. "[IP::client_addr]:[TCP::client_port]: Added XFF: [HTTP::header values "X-Forwarded-For"]" 
    } 
 }

Aaron