Load balancer with IP Source Address expression on custom rule has stopped working

Application Performance Load Balancing
1

What is the name of the domain?

fidapi.veloxtickets.com

What is the error number?

none

What is the error message?

none

What is the issue you’re encountering

I used to use the IP filter rule to approve the server with the new version of the application, directing me to a non-public pool with that server. But that stopped working a few weeks ago. I had the response header written as “ip.src” to confirm my IP and the expression I’m using is correct: “(ip.src eq 200.52.30.16)” (my IP is 200.52.30.16)

What steps have you taken to resolve the issue?

  • Create a Request Header Transform Rule setting a dynamic header, like “Real-Ip” with “ip.src”
  • Create a Custom Rule on Load Balancer with expression like “(any(http.request.headers[“real-ip”][*] eq “200.52.30.16”))” instead a “(ip.src eq 200.52.30.16)” (my IP is 200.52.30.16)

What are the steps to reproduce the issue?

  • Create a Custom Rule on Load Balancer with expression like “(ip.src eq 200.52.30.16)” (my IP is 200.52.30.16)
2

Go here. What IP address is returned?

https://cloudflare.com/cdn-cgi/trace

3

Hi, thanks for reply.

Trace returns:

fl=598f108
h=cloudflare.com
ip=200.52.30.16
ts=1751561884.664
visit_scheme=https
uag=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
colo=GRU
sliver=none
http=http/2
loc=BR
tls=TLSv1.3
sni=plaintext
warp=off
gateway=off
rbi=off
kex=X25519MLKEM768

4

And you’re not using Geosteering correct? What’s the status of the pool with the server you’re supposed to be conncting to? Can you confirm it’s available and that you’re not falling over because it’s not available for the connection?

5

Thanks for the reply.

And you’re not using Geosteering correct?
Not using.

What’s the status of the pool with the server you’re supposed to be conncting to?
Healphy

Can you confirm it’s available and that you’re not falling over because it’s not available for the connection?
It´s available and the workaround with Request Header works. It´s strange, expression “(ip.src eq 200.52.30.16)” don´t work and “(any(http.request.headers[“real-ip”][*] eq “200.52.30.16”))” works! - real-ip is “injected” by Request Header Transform Rule with “ip.src”!

I have other open ticket that seems to be related and started some weeks ago, together: Load balancer Client IP fallback for session affinity is not working - it´s like ip.src is blank (on Load Balance phase) and can´t be use on expression or internal by load balance…

6

Hi,

I ran a test today and the IP filter “ip.src eq …” still didn’t work.

Can I send something else, like a video, to demonstrate the problem? The problem is obvious, but I believe it is only happening to me or a few customers.