Forum Discussion
Adam1g_232101
Nimbostratus
Dec 13, 2016Session Persistence with more IP addresses
Hi,
We have configured client persistence based on X-Forwarded-For header (to support WAF which forwards data to F5), and it works pretty well, but in persistence entries I see that some of them...
Dvirus_297774
Altocumulus
Dec 13, 2016I think this is the solution for you:
 
https://devcentral.f5.com/s/articles/xff-universal-persistence-irule
 
Summary:
 
you should create universal persistence profile -> config it with this iRule will take the first IP in case there is multiple IPs:
 
Name: persist_xff_uie
To be used with UIE Persistence Profile
Checks HTTP Request for 'X-Forwarded-For' header and if exists takes the first 'X-Forwarded-For' IP address as sets as
Persist identifier.
If the 'X-Forwarded-For' header does not exist then the client IP address is set as Persist identifier.
when HTTP_REQUEST {
if {[HTTP::header X-Forwarded-For] != ""} then {
persist uie [lindex [ split [lindex [HTTP::header values X-Forwarded-For] 0] "," ] 0]
} else {
persist uie [IP::client_addr]
}
}
Good luck!
 
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects