For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

cquick11_115408's avatar
cquick11_115408
Icon for Nimbostratus rankNimbostratus
Jun 07, 2013

Real source IP from a CDN (EdgeCast) Persistence

This is just a reference for people using edgcast or another cdn.

 

You have to request that Edgecast sends the True-Client-IP and then set it up as a universal persistence profile with the irule below, they can actually send other fields in the http header. We just modfied the rule below from the forum.

 

 

when HTTP_REQUEST {

 

if { [HTTP::header exists "True-Client-IP"] } {

 

persist uie [HTTP::header "True-Client-IP"]

 

log local0. "[virtual name]:[HTTP::header value "True-Client-IP"]"

 

}

 

}

 

Thanks Guys.

 

 

1 Reply

  • Funny how things work, I was checking something else and I came across Chris Miller's rule. I searched for this type of rule and couldn't find it. Oh well, here is Chris's link regarding Akamai

     

     

    https://devcentral.f5.com/wiki/iRules.Akamai-True-Client-IP-Header-Persistence.ashx