For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Emilio_104473's avatar
Emilio_104473
Icon for Nimbostratus rankNimbostratus
Feb 14, 2009

Redirect based on IP within X_FORWARDED_FOR

Hi,   I am looking to find the way to redirect requests made to a virtual server to be redirected to a another Pool, based on the IP address within X_forwarded_for header.       ...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Feb 16, 2009
Hi Emilio,

 

 

An XFF header value (or multiple XFF headers) can be inserted manually by a malicious client. I don't think it would be very bulletproof to depend on this header value to prevent known bad client IP addresses from accessing the VIP. It would be more ideal to filter at the device that sees the original client IP address as the source of the TCP packets.

 

 

Aaron