F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

ismail2's avatar
ismail2
Icon for Nimbostratus rankNimbostratus
Jun 28, 2020

BotDefense XFF when using CDN

I am having trouble with Bot-Defense detecting the client_ip (XFF) when using cloudflare.   The ASM Profile is working fine when i add custom header and enable X-Forwarded-For although the BotDef...
ASM Advanced WAF
BIG-IP
security
Emil's avatar
Emil
Icon for Altocumulus rankAltocumulus
Sep 19, 2022

I am having the same issue. Did you manage to fix it? In my case I have CloudFlare CDN in front of the f5 AWAF.

What is the best implementation in this setup?

1. CF is considered as upstream proxy and set HTTP profile with trust XFF

2. Use irule to change cloudflare headers into XFF; X-real-ip. Botdefense seems to match cloudflare as a malicious bot.

I will appreciate any advise and assisstance.

Thanks.