X-Forwarded in F5

In the HTTP profile there is a drop-down to enable the insertion of the header. Its literately an easy button on BIG-IP.

 

https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/ltm-concepts-11-4-0/7.html

 

Thanks Kai,

 

Will it take care of IP, port and protocol ?

 

I think it will only X-Forwarded IP

 

Create custom HTTP profile and 'Enable' X-forwarder. https://support.f5.com/kb/en-us/solutions/public/4000/800/sol4816.html In a GUI its just one click with mouse. in CLI modify global parameter of HTTP profile ltm profile http new-http-x-forward-profile { insert-xforwarded-for enabled }

 

then apply http profile to yoour virtual-server.

 

Just notice you also mentioned X-Forward-Proto and X-Forwarded-Port, if you want that you will have to either use a local traffic policy or an iRule. A real easy irule to add those is this.

when CLIENT_ACCEPTED {
    if { [PROFILE::exists clientssl] == 1 } {
        set protocol "https"
    }
    else {
        set protocol "http"
    }
}

when HTTP_REQUEST {
    HTTP::header replace X-Forwarded-Proto $protocol
    HTTP::header replace X-Forwarded-Port [TCP::local_port]
}

Just notice you also mentioned X-Forward-Proto and X-Forwarded-Port, if you want that you will have to either use a local traffic policy or an iRule. A real easy irule to add those is this.

when CLIENT_ACCEPTED {
    if { [PROFILE::exists clientssl] == 1 } {
        set protocol "https"
    }
    else {
        set protocol "http"
    }
}

when HTTP_REQUEST {
    HTTP::header replace X-Forwarded-Proto $protocol
    HTTP::header replace X-Forwarded-Port [TCP::local_port]
}

Hi Sabeer Ali,

no

X-Forwarded-For

would just forward the IP. To forward other Information you should use the iRule below...

when CLIENT_ACCEPTED {
    if { [PROFILE::exists clientssl] } then {
        set client_protocol "https"
    } else {
        set client_protocol "http"
    }
}
when HTTP_REQUEST {
    HTTP::header insert "X-Forwarded-For" [IP::client_addr]
    HTTP::header insert "X-Forwarded-Proto" $client_protocol
    HTTP::header insert "X-Forwarded-Port" [TCP::client_port]
}

Cheers, Kai