SSL Bridging and X fwd for ADFS
We currently have a VIP configured for external ADFS that is doing SSL passthrough. We are trying to utilize the X Forwarded for header with SSL bridging however during our change neither the SSL bridging or the x forwarded for option was sucessfull. When applying either or both config that traffic would fail and the web page would show page unreachable. Does anyone have any expereience with this type of change
X-forwarded-for getting private client IP address
Hello All, I am trying to figure out why the x-forwarded-for variable is being populated with a private client IP address when the virtual server is accessed from certain clients but others it gets populated with the public IP? I would like the x-forwarded-for variable to always use the public IP address and not the private IP if possible. Testing One of my developers created a variables test page so I can see what IP is being populated in the x-forwarded-for variable. When I launch this page from some machines the x-forwarded-for address will match the public IP address that I get when I google what is my IP and not the private IP address I see when I use ipconfig. We then have a few customers that when they connect to this site the x-fowarded-for variable is populated with the private IP that is assigned to their computer. Configuration I have an active/standby HA pair running 12.1.2 HF2 This particular configuration was done from http template Plaintext to and from both client and servers Internal server is running IIS with advanced logging enabled Source Address Translation is set to Auto Map http profile has Insert x-forward-for enabled Thanks for any help or advice you can provide.
create a new Header value manipulation iRule
create a new Header value manipulation iRule. This iRule needs to interrogate Header values and substitute the x-forwarded-for value with True-Client-IP value if available. our CDN is providing the actual client IP address via this new Header value yet our current code base leverages the x-forwarded-for Header value for client address interrogation. This iRule allows for zero code impact while allowing us to leverage the new CDN IP Header value. can anyone tell me if this is correct? or moreso how to form this into an iRule. irules are my absolute weakest part of the f5 IF Header Name True-Client-IP Exists THEN Set X-Forwarded-For Value equal to True-Client-IP value END IF
Irule to strip header Xforwarded ssh/sftp
I have an Irule that strips out the xforwarded header information and passes the client IP to our servers instead of the F5 IP. I would like to set up an Irule to strip header Xforwarded for ssh/sftp requests. Has anyone tried this before or know of a link? I have searched dev central with no luck. Thanks in advance