For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

zikovich_146574's avatar
zikovich_146574
Icon for Nimbostratus rankNimbostratus
Mar 06, 2014

XFF licensing for https

Hello,   I have (maybe a simple) question about XFF in F5 BigIP. We have application that is using SSL (https) and we would like to activate de XFF option in our F5 and i would like to know if do ...
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Mar 06, 2014

More or less, you are correct. Offloading client side SSL requires a client SSL profile applied to the virtual server. That client SSL profile must have, at a minimum, a server certificate and its corresponding private key. Enabling XFF header injection is a checkbox option in the HTTP profile: Insert X-Forwarded-For.