Skip to content

Instantly share code, notes, and snippets.

@ed00m
Forked from dwallraff/f5_xfp.txt
Created October 6, 2017 00:31
Show Gist options
  • Save ed00m/6fe5dbb3cbc8ad39888cf2f412de040c to your computer and use it in GitHub Desktop.
Save ed00m/6fe5dbb3cbc8ad39888cf2f412de040c to your computer and use it in GitHub Desktop.
F5 config - X-Forward-Proto (XFP)
Recommended solution would be:
- Use Insert header, in the custom HTTP profile that you applied to the virtual servers.
For HTTPS Virtuals, insert: X-Forwarded-Proto, with a value of https
For HTTP Virtuals, insert: X-Forwarded-Proto, with a value of http
Of course you could also use apply an iRule to the Virtual Server, something like this should work:
when HTTP_REQUEST {
if { [SSL::mode] == 1 } {
if {!( [HTTP::header "X-Forwarded-Proto"] eq "https") }{
HTTP::header insert X-Forwarded-Proto "https"
}
if { !( [HTTP::header exists "X-Forwarded-Port"]) }{
HTTP::header insert X-Forwarded-Port [TCP::local_port]
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment