Forum Discussion

gkorah_32913's avatar
gkorah_32913
Icon for Nimbostratus rankNimbostratus
Jun 29, 2010

Logging options per VIP

Looking for a solution that will enable me to capture the transaction logs for a particular VIP & also retain the source IP for audit purposes.

 

 

I have tried the x-forwarder option in the HTTP profile, but when I look at the IIS logs, i still get to see the self IP of the F5.

 

 

Any help on this is much appreciated.

 

 

Thx.

 

5 Replies

  • Crazy question - can you make sure the http profile you modified to enable "x-forwarded-for" is applied to your VIP?

     

     

    Otherwise - maybe your logs need some help - what version of IIS are you running?

     

     

    This might be useful if you're on 7

     

     

    http://devcentral.f5.com/weblogs/Joe/archive/2009/12/23/x-forwarded-for-http-module-for-iis7-source-included.aspx

     

     

  • When using X-Forward, the true client IP Address isn’t automatically presented to the destination server (If it was there might be some routing problems and such as broken routes).

     

     

    The Client IP Address is actually put into the Header, so you have to go and retrieve it.

     

     

    Joe created ISAPI Filter that you can configure inside of IIS to do this for you. See this post: http://devcentral.f5.com/weblogs/joe/archive/2005/09/23/1492.aspx

     

  • Yep..checked the option again & it's applied to the VIP. The web servers are running IISv7.
  • just out of curiosity, where does the LTM write the logs for all the VIPs configured ? is there a specific file under /var/logs/ <> that I can look for if I have to track an IP ?
  • OK. If your running IIS7, check out this link:

     

    http://devcentral.f5.com/weblogs/Joe/archive/2009/12/23/x-forwarded-for-http-module-for-iis7-source-included.aspx

     

     

    Logs are put in the /var/logs/ltm log by default. This is the same log that the .local0 logging is sent to from an iRule.