IP address of DDOS provider being displayed instead of customer IP in XFF header

Hello Paul,

What you did is wrong, let me expain.

The irule that you set allow you to insert XFF from F5 (you will send F5 IP to your backend). Example: you want to insert XFF for backend serveur you can use this Irule ou use HTTP profil by checking "Insert XFF".

For me you have to remove this Irule from your VS and uncheck "Insert XFF" from HTTP profil.

Normaly the backend have to received XFF header send by provider, F5 will FW it to the backend..

Regards