For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Sesha_111292's avatar
Sesha_111292
Icon for Nimbostratus rankNimbostratus
Mar 28, 2011

X-Forwarded-for returning multiple IPs

Insert X-forwarded-for in the HTTP profile, is adding client ip and the IP's of proxies in the path, to the HTTP Header. Is there a way for the LTM to add only the client IP, and not all the proxy IP addresses?
config
design

2 Replies

  • L4L7_53191's avatar
    L4L7_53191
    Icon for Nimbostratus rankNimbostratus
    Mar 29, 2011
    This is expected behavior - have a look here for a walk through of what is going on, as well as a work around if you want to ignore the chain of addresses.

     

    http://support.f5.com/kb/en-us/solutions/public/4000/800/sol4816.html?sr=13566650

     

     

    -Matt Cauthorn
  • JRahm's avatar
    JRahm
    Icon for Admin rankAdmin
    Mar 29, 2011
    You can loop through the values in the X-Forwarded Header, or just take an element from the list (first, assuming each proxy appended the original value). Here's a good thread on this issue:

     

     

    http://devcentral.f5.com/Community/GroupDetails/tabid/1082223/asg/50/aft/1174108/showtab/groupforums/Default.aspx Click Here