For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

CPSSupport's avatar
CPSSupport
Icon for Nimbostratus rankNimbostratus
Feb 15, 2021

iRules change HTTP::Payload when talking to the backend servers

I need to make some changes using the iRules to the request payload then need to pass the original request to the backend server, is there a compatible event with HTTP::Payload command that can pass ...
application delivery
iRules
iRulesLX
HazemFouda's avatar
HazemFouda
Icon for Nimbostratus rankNimbostratus
Feb 17, 2021

I want to manipulate the payload then pass F5 the manipulated one but the backend server will receive the original payload can you help me, please ?

Daniel_Wolf's avatar
Daniel_Wolf
Icon for MVP rankMVP
Feb 18, 2021

Maybe you can try a layered virtual. I am not a big fan of using layered virtuals since they add an extra layer of complexity when troubleshooting.

 

Traffic would flow like this:

vIP_1 >> iRule manipulates payload >> passes ASM >> vIP_2 >> iRule manipulates payload back >> backend server

 

Here are some steps for guidance.

K13315545: Configuring a BIG-IP ASM virtual server to protect a BIG-IP APM login page with brute force prevention

In this approach you can also combine iRules and LTM Traffic Policies.