Chapter 3: Condition Reference
109
proxy.address=
Tests the destination address of the arriving IP packet. The expression can include an IP address or
subnet, or the label of a subnet definition block.
If the transaction was explicitly proxied, then proxy.address= tests the IP address the client used to
reach the proxy, which is either the IP address of the NIC on which the request arrived or a virtual IP
address. This is intended for situations where the proxy has a range of virtual IP address; you can use
proxy.address= to test which virtual IP address was used to reach the proxy.
If the transaction was transparently proxied, then proxy.address= tests the destination address
contained in the IP packet. Note that this test may not be equivalent to testing the
server_url.address. The server_url.address and proxy.address conditions test different
addresses in the case where a proxied request is transparently intercepted: server_url.address=
contains the address of the origin server, and proxy.address= contains the address of the upstream
proxy through which the request is to be handled.
Note: proxy.card= functions correctly for transparent transactions.
Replaces: proxy_address=
Syntax
proxy.address=ip_address|subnet|subnet_label
where:
•ip_address—NIC IP address or subnet; for example, 10.1.198.54.
•subnet—A subnet mask; for example, 10.1.198.0/24
•subnet_label—Label of a subnet definition block that binds a number of IP addresses or subnets.
Layer and Transaction Notes
•Use in <Admin>, <Proxy>, and <Forward> layers.
• Applies to proxy transactions.
Examples
; Service should be denied through proxy within the subnet 1.2.3.x.
<proxy>
proxy.address=1.2.3.0/24 deny
See Also
• Conditions: client.address=, client.protocol=, proxy.card=, proxy.port=
• Definitions: define subnet