Forum Discussion

seamlessfirework's avatar
seamlessfirework
Icon for Cirrus rankCirrus
Apr 26, 2023

BIG-IP / Virtual Server for UDP & TCP DNS Loadbalancing / extracting client IPs

Hi guys, I have several VS that do loadbalancing to DNS servers. All of VS have AutoMap configured. The real DNS servers only see the SNATed client IP of the BIG-IP because of AutoMap. Currently the...
security
seamlessfirework's avatar
seamlessfirework
Icon for Cirrus rankCirrus
Apr 28, 2023

Unfortunately I doesn't work. The iRule code example states the following

when CLIENT_ACCEPTED {
  set my_hsl [HSL::open -publisher /<partition>/<log publisher>]
}
when HTTP_REQUEST {
  HSL::send $my_hsl "Request: [HTTP::host][HTTP::uri]"
  log local0.info "Request: [HTTP::host][HTTP::uri]"
}
when CLIENT_CLOSED {
  unset my_hsl
}

In my case I have UDP DNS traffic that I want to log to a remote syslog. However my iRule code only has the "when CLIENT_ACCEPTED" statement where I set the HSL variable and send the logs via HSL::send. Maybe this is the problem?

I configured the HSL pool in the Common partition as well as the log configuration (publisher, destination etc.). The iRule is configured in another partition. Is such a configuration valid or problematic?