For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ant77's avatar
ant77
Icon for Cirrostratus rankCirrostratus
Aug 30, 2021

Persist profile using XFF to read client IP address

Hi All, Based on what we are using below, traffic to our website goes through a CDN that changes the "real" client's IP address to their proxy IP...So we can't use source-client IP persistency on ...
application delivery
iRules
LTM
oguzy's avatar
oguzy
Icon for Cirrostratus rankCirrostratus
Aug 31, 2021

Hi ant77,

You can try below one (please do not forget to change port_number to listening port on your backend server):

when HTTP_REQUEST { 
  set clientip [lindex [ split [lindex [HTTP::header values X-Forwarded-For] 0] "," ] 0]
  if {[HTTP::header X-Forwarded-For] != "" && $clientip equals "200.200.200.200" } then {
      persist uie $clientip
      node 10.10.10.11 port_number
  } else {
      persist uie [IP::client_addr]
      pool AppServer123
  }
}

https://clouddocs.f5.com/api/irules/node.html

If you also need to persistence based on XFF other than 200.200.200.200, you should modify the irule.