Forum Discussion

Jibinpv_254622's avatar
Jibinpv_254622
Icon for Nimbostratus rankNimbostratus
May 01, 2019

Accept XFF on HTTP Profile Behaviour

Hi Team,

I need a little help from you to get a bit understanding about a function Accept XFF in the HTTP Profile.

If the incoming traffic to the F5 VS is coming with a XFF header appended like XFF_HEADER=10.10.10.10 20.20.20.20.

If the accept XFF feature enabled on http profile ,does the VIP forward only one ip address from it to the back end once the traffic are send ? say the back end application will see only 10.10.10.10 ?

If so how does the algorithm works ?

ltm profile http http_XFF {

accept-xff enabled
app-service none
defaults-from http
enforcement {
    known-methods { CONNECT DELETE GET HEAD LOCK POST PROPFIND PUT UNLOCK }
    unknown-method reject
}
insert-xforwarded-for disabled
oneconnect-transformations disabled
proxy-type reverse
redirect-rewrite matching

}