For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Gregory_Gerard_'s avatar
Gregory_Gerard_
Icon for Nimbostratus rankNimbostratus
Apr 30, 2008

Oddities in XForwardedFor?

I'm using Tomcat as a webserver and I've got access logs recording the XForwardedFor header into the log.     The oddity I'm seeing is this:   10.20.108.103,unknown     My internal netw...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
May 02, 2008
The HTTP profile option would just add a new XFF header with the client IP address. It wouldn't touch any existing XFF headers.

 

 

The XFF header LTM inserts would be the last XFF header in the request and in theory this is the one the server should parse for its logging.

 

 

The iRule ensures that no prior XFF headers are included in the request sent to the server.

 

 

Aaron