Forum Discussion
adiezma_1656
Nimbostratus
Nov 14, 2011Redirect two conn to pool, and other conn to default pool
Hi!,
The problem is that there is a proxy in the middle and translates the source addresses.
A. Diezma
7 Replies
- nitass
Employee
does proxy insert x-forwarded-for header?
if yes, can you try this?
Route Traffic Based on Header Info
http://devcentral.f5.com/Community/GroupDetails/tabid/1082223/asg/50/aft/1176873/showtab/groupforums/Default.aspx - adiezma_1656
Nimbostratus
No problem with "xff". I will try.
thank you very much - adiezma_1656
Nimbostratus
Great! it works!
I applied:
When HTTP_REQUEST {
if {[HTTP:: header "X-Forwarded-For"] contains "x.x.x.164"} {
pool my_pool }
elseif {[HTTP:: header "X-Forwarded-For"] contains "x.x.x.167"} {
pool my_pool }
WEB} else {pool default_pool
}
Now I need another just to VS_port 443
Thanks a lot!!
Antonio - adiezma_1656
Nimbostratus
I also had to apply the profile http-xff - nitass
Employee
just in case there is more than one x-forwarded-for header.
Using X-Forwarded-for to block Clients?
http://devcentral.f5.com/Community/GroupDetails/tabid/1082223/asg/50/aft/1174108/showtab/groupforums/Default.aspx
cheer! - adiezma_1656
Nimbostratus
Don't use xff for blocking, only for testing website
Again, thank you very muchSolved!
- nitass
Employee
Don't use xff for blocking, only for testing website sorry i did not explain well. actually, i just want to point how we parse x-forwarded-for header if there is more than one.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects