Forum Discussion
Duncan_Proffitt
Altostratus
AltostratusXFF and the ASM module
WE are experiencing a situation where the F5 is denying traffic due to an XFF that it doesnt understand.
The F5 receives traffic from a certain server that has already added an XFF on to the IP ...
Duncan_ProffittAltostratus
AltostratusHi Brett
Topology
Internet users | Verisign server (takes Internet users IP add and adds first XFF) | BigIP (needs to accept above and add its own XFF or just accept it and pass it through to the back end financial monitoring package | Financial monitoring package | Backend database
The XFF is being added before the Big Ip and then we would like to add another XFF to the packet on the way through or allow it to just pass through.
What is happening is the financial monitoring package is only seeing the first XFF but not the Internet users IP add in the XFF
Here is an example of the header from the Verisign device heading to the BigIP
