For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Atif_Malik_1133's avatar
Atif_Malik_1133
Icon for Nimbostratus rankNimbostratus
Nov 10, 2005

(re)Setting remote_addr

I saw several posts on how to get the real client ip to be forwarded as a variable. My problem is slightly different I want to reset the variable REMOTE_ADDR to be the real client address. All the iru...
application delivery
dev
devops
iRules
Joe_Pruitt's avatar
Joe_Pruitt
Nov 10, 2005
REMOTE_ADDR is actually part of the CGI specification (Click here).

 

 

So, when BIG-IP inserts the REMOTE_ADDR header with your value, it gets to apache and apache says, hummm, I need to supply the value for the client side address in the REMOTE_ADDR environment variable but I see a client suppled HTTP header with that same name. I guess I'll prefix their header with "HTTP_" so that both are maintained.

 

 

So, basically, you cannot override standard CGI varables. You'll either need to come up with another name, or live with the auto-renaming that apache is doing.

 

 

With that said, Apache is very configurable. I'd be surprised if you couldn't hack the configuration on your webservers to replace the REMOTE_ADDR with another header value. I'm just not very well versed in apache config so I don't know for sure.

 

 

-Joe