X-Forwarded-For through proxy and F5

Hi,

Okay, I think that might be because that is from one of your proxies that already inserts XFF, correct? I hinted earlier that you might need to adjust the behavior per client(or proxy) IP. I might have some bad indentation here but this is something to the idea-

when HTTP_REQUEST {

 if { [IP::addr [IP::client_addr] equals IP_PROXY_THAT_ALREADY_INSERT_XFF/CIDR] } { 
   we know this proxy already inserts XFF, so dont do anything but load balancer
   pool [LB::server pool]

} else {
    insert client IP to add visibility after f5 SNAT
     set XFF [IP::remote_addr]
     HTTP::header replace "X-Forwarded-For" $XFF

     }

}

also if the proxies are sending multiple http requests per connection you may need to enable oneconnect to get your iRule to work correctly.

Let me know how your ssldump goes...