iRule for AFM IP Intelligence security policy to work with HTTP XFF (X-Forwarded-For) headers
Code is community submitted, community supported, and recognized as ‘Use At Your Own Risk’.
Short Description
As mentioned in article https://my.f5.com/manage/s/article/K73304774 (K73304774: ...
Updated Aug 17, 2023
Version 8.0
Brandon_
Employee
EmployeeNikoolayy1 nice writeup.
At Agility we've regularly done a lab on this solution for AFM. And you can get really creative and apply a different firewall policy for the URI as well. e.g. /login and /admin can have different firewall policies as the virtual forwarding creates a whole new TCP connection between the two virtual servers.
https://clouddocs.f5.com/training/community/firewall/html/class1/module1/lab4.html
Cheers!
-Brandon