Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

1 Reply

  • This is my understanding:

    X-Forwarded-For: client IP, proxy1 IP, proxy2 IP

    X-Real-IP: client IP

    X-Real-IP just has the originating IP address and X-Forwarded-For has client IP and other intermediate proxies. I have seen variations in this implementation and there is no strictly enforced standard.