True-Client-IP error generated. /var/log/ltm

Either ditch the iRule and use the HTTP profile to insert an X-Forwarded-For header (so that this can be captured in server access logs), or if you really need the True-Client-IP header then try;-

rule trueclient_ip_rule {
    when HTTP_REQUEST { 
        HTTP::header insert True-Client-IP "[getfield [IP::client_addr] % 1]"
    }
}

Forgive my ignorance, but the suggest amendments to the rule are the same ?

Regards,

I have a theory about what is happening. However, can't prove it due to sheer volume of traffic that is hitting the VIP that this is associated with.

Would it be possible to include a statement - Only to insert the [IP::client_addr] - IF the connection is still open?

I could be experiencing something where the connection is being torn down before the iRule has chance to be processed - Therefore generates an error for a few number of sessions.

Regards

Hmmm....not so sure on that theory - have you found anything? Maybe some of the requests are not properly formed HTTP requests and that is why it is failing. Why don't you try;

rule trueclient_ip_rule { when HTTP_REQUEST { if {[catch {HTTP::header insert True-Client-IP "[getfield [IP::client_addr] % 1]"}]} { log local0. "Caught [HTTP::request]" } } }

Of course it will probably still barf when you try to do the logging but may tell you something.

Ok - Just to give a final close to this one.

There was a fault that was being caused by another VIP on the F5 issueing a re-direct (This has been suggested before, however I didn't spot the priority statement), so regardless of the ordering of the rules physically, it wouldn't have fixed.

We have since added a priorty statement so it'll be processed the first rule on the VIP - issue solved.

Thank you for your help.

Thanks for the update. Do you mean the same VIP issuing a redirect from another iRule?

Since the last post we have had a nearly identical issue, which F5 agreed was probably related to malformed HTTP request, however I will double check that we don't have a 2nd iRule attached too..

Exactly that IheartF5 -

:)