Operation not supported (line 3)invoked from within "HTTP::header remove x-forwarded-for"

Question

Dears,&nbsp;
I have this error in my Big IP F5 3900 10.24.577:&nbsp;
TCL error: xxxxxxxxx  - Operation not supported (line 3) invoked from within "HTTP::header remove x-forwarded-for" &nbsp;
Irule is:&nbsp;
when HTTP_REQUEST {
 strip all instances of the given header
  while {[HTTP::header exists x-forwarded-for]}{
      HTTP::header remove x-forwarded-for
}
HTTP::header insert X-Forwarded-For [IP::remote_addr]
  set http_request_time [clock clicks -milliseconds]
 ........&nbsp;
How can I modify it to avoid this error?&nbsp;
Any suggestion will be welcome.&nbsp;
Fabrizio.&nbsp;

binarycanary_19 · Answer

Please re-post the irule, and use the "preformatted/code" option in the editor when pasting it. Paste the full irule if possible, and obfuscate any sensitive parts that if necessary, without altering the meaning of the irule.

brad_parker · Answer

Couple of things.  change your while to if and you should be good to go with the irule.  However, if you are on v11.5+ you can use the HTTP profile to ignore the X-Forwarded-For header from clients by configuring X-Forwarded-For header acceptance to disabled.  You can then also enable X-Forwarded-For header insertion in the profile to insert that header. This will be much more efficient than the iRule.

jrc-soc · Answer

Dear Brad,
I've tried to change the script, but I have the same error.
Do you have any other suggestions?&nbsp;
Many Thanks.
Fabrizio&nbsp;

jrc-soc · Answer

Dear Brad,
I've tried to change the script, but I have the same error.
Do you have any other suggestions?&nbsp;
Many Thanks.
Fabrizio&nbsp;

Forum Discussion

Operation not supported (line 3)invoked from within "HTTP::header remove x-forwarded-for"

4 Replies

Recent Discussions

import live updates from version x to version y

Tenant image upgrade

iRule editor partition button does not work

F5Access | MacOS Sonoma

Overwriting or adding LTM SSL Traffic cert and key using iControlREST

Related Content

Using "X-Forwarded-For" in Apache or PHP

2. SYN Cookie: Operation

Add a custom "X-forwarded-for" header name

exclude HTTP::header value Content-Type] equals "text/xml; charset=utf-8" from SSL redirect

Security Operations Center - Helpers Behind the Scenes