Hi, Does this seem right?
acl HAS_CF_CONNECTING_IP hdr_cnt(CF-Connecting-IP) eq 1 acl HAS_X_FORWARDED_FOR hdr_cnt(x-forwarded-for) eq 1 tcp-request content track-sc0 hdr_ip(CF-Connecting-IP,-1) if HTTP HAS_CF_CONNECTING_IP tcp-request content track-sc0 hdr_ip(x-forwarded-for,-1) if HTTP !HAS_CF_CONNECTING_IP HAS_X_FORWARDED_FOR So use CF-Connecting-IP if present, X-Forwarded-For else. Thanks, Mathias
