iRule for AFM IP Intelligence security policy to work with HTTP XFF (X-Forwarded-For) headers

Code is community submitted, community supported, and recognized as ‘Use At Your Own Risk’. Short Description As mentioned in article https://my.f5.com/manage/s/article/K73304774 (K73304774: ...

Updated Aug 17, 2023

Version 8.0

devops

iRules

security

Was this article helpful?

Brandon_

Employee

Aug 15, 2023

Nikoolayy1 nice writeup.

At Agility we've regularly done a lab on this solution for AFM. And you can get really creative and apply a different firewall policy for the URI as well. e.g. /login and /admin can have different firewall policies as the virtual forwarding creates a whole new TCP connection between the two virtual servers.

https://clouddocs.f5.com/training/community/firewall/html/class1/module1/lab4.html

Cheers!

-Brandon