For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Proxy Protocol Receiver

Problem this snippet solves: iRule for BIG-IP to receive PROXY protocol (v1 and v2) header in TCP Payload and remove it before forwarding remaining TCP Payload to server side pool member. How to us...
Published Sep 02, 2015
Version 1.0
application delivery
devops
elb
haproxy
iRules
LTM
proxy
Chad_Jenison's avatar
Chad_Jenison
Icon for Nimbostratus rankNimbostratus
Mar 09, 2017

I believe 3) should be as easy as adding the following to the bottom of the code hung off the CLIENT_DATA event, along with a setting of $static::useProxyProtocolSourceForSNAT in "RULE_INIT" to 1.

 

This syntax validates, but I'll need time to do some testing.

 

Chad

 

if {$static::useProxyProtocolSourceForSNAT} {
    if {$srcaddr}{
        snat $srcaddr
    } elseif {$v2_sourceAddress} {
        snat $v2_sourceAddress
    } elseif {$v2_v6sourceAddress} {
        snat $v2_v6sourceAddress
    }
}