__exclusive__ — A10 X-forwarded-for

slb template aflex append_xff_script source "append_real_ip_to_a10_xff.tcl" ! slb virtual-server vs_webapp port 80 http template aflex append_xff_script

: For more complex logic—such as parsing specific values from a chain of multiple IPs or performing a lookup/hash for persistence—you can use an aFleX script to manually extract or modify the X-Forwarded-For header in the HTTP_REQUEST event. Security Considerations a10 x-forwarded-for

when HTTP_REQUEST # Remove any existing XFF from the client (untrusted) HTTP::header remove "X-Forwarded-For" # Insert only the trusted value from A10 HTTP::header insert "X-Forwarded-For" [IP::client_addr] a10 x-forwarded-for

$remote_addr will now reflect the true client IP. a10 x-forwarded-for