For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ant77's avatar
ant77
Icon for Cirrostratus rankCirrostratus
Mar 09, 2021

Universal persistence using IPV6 with iRule..

Hello everyone and F5,   please help....I am stuck and don’t know what to do or if F5 can support this...   Does anyone know how to persist an IPV6 address in an X-forwarded-for header, or add it...
application delivery
BIG-IP
iRules
ant77's avatar
ant77
Icon for Cirrostratus rankCirrostratus
Mar 11, 2021

Hi Jason,

 

We can't use a default source_addr profile because the inbound traffic goes through a CDN, which they append the client IP and their proxy IP to the XFF header. We use the irule to look into this and persist the connection for the client to a server in the backend. This works fine with IPV4, however there are instances where some of our user's ISP is giving them an IPV6 address. How can this iRule or any other method be used to read the IPV6 along with the IPV4 (this irule) and persist the client

based on that?

 

Thanks!

JRahm's avatar
JRahm
Icon for Admin rankAdmin
Mar 12, 2021

it should be possible, but I really need to see samples of the contents of your XFF headers in ipv4 and ipv6 to see if you are indexing and splitting correctly for both protocols. I can track down bugs and experience in the meantime. Sorry, I don't have much operational ipv6 experience