Bug ID 599313: Support IPv6 address in XFF header to encapsulated within square brackets

Last Modified: Apr 10, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP ASM(all modules)

Known Affected Versions:
12.1.0, 12.1.0 HF1, 12.1.0 HF2, 12.1.1, 12.1.1 HF1, 12.1.1 HF2, 12.1.2, 12.1.2 HF1, 12.1.2 HF2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6, 12.1.3.7, 12.1.4, 12.1.4.1, 13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3, 13.0.1

Fixed In:
13.1.0

Opened: Jun 15, 2016
Severity: 3-Major

Symptoms

ASM cannot extract IPv6 addresses from XFF header when it is encapsulated within square brackets.

Impact

ASM treats the TCP connection IP address as the request IP address instead of the one present in the XFF header.

Conditions

1. Trust XFF is on in ASM policy. 2. IP address in XFF header is IPv6 and encapsulated within square brackets.

Workaround

None.

Fix Information

ASM parser now allows IPV6 to be encapsulated within square brackets.

Behavior Change