Forum Discussion
Techgeeeg_28888
Nimbostratus
NimbostratusClient IP & Daily data flow
Hi everyone,
I hope alot of you might have come across such a requirement in most of the implementation we use snat automap which causes the servers to see the BIG-IP IP ADDRESS instead of the actual client IP address. Do we have a way to find out the Client IP's from where the traffic is coming can it show up in the reporting?
My second query is I want to know the total amount of Data sent/received and bandwidth consumed by the particular WIP on a LC "per day" how can I achieve this.
My third query is I want to know how much Bandwidth is consumed and data sent/received on the LAN for accessing the particular VIP on "per day"
Can someone help me with these queries.
Regards,
HamishCirrocumulus
What version of LTM are you using? And is it HTTP? or something else?
For HTTP on v11 you have AVR. That'll show you on the LTM itself a lot of info (e.g. query3). And you have request logging as well. Either built-in, OR you could write an iRule to send it via HSL or SIDEBAND connections to your logging server of choice.
If it's HTTP and you want the client IP at the poolmember you can use an X-ForwardedFor header to add the actual client IP to the HTTP headers. Other protocols, I'm afraid you're on your own... Most don't have the concept of inserting original client IP's in the stream anywhere I'm afraid...
For your second query... I'd use netflows from your Layer3 switch/router... YMMV...
H
TechgeeegHi Hamish,
Well I am using version 10 but AVR is not going to be enough for what I am looking for.I really dont understan why F5 still misses such required reporting... and as part of the money making I have to get it coded or take a burden on my head to do it really why.... LC is a perimiter device and should carry such reporting details.
Netflow, PRTG all are answers of this query but whats something there avaliable on the box ????? is there any reporting available or not.
Regards,- HamishYou can either use cacti, or buy Enterprise Manager then.
H - TechgeeegHamish can you provide a link to any document from F5 For Enterprise Manager saying that all of these capabilities are available on F5 Enterprise Manager also the document should show the reporting GUI's rather then verbal speaking as far as I have read about EM it's not going to be enough for this.
All such answers like cacti, Netflow, PRTG etc etc I know that... but once I have purchased out a hardware and the capability belongs to the hardware then the reporting should also be generated by the hardware why should I maintain multiple things really why. - HamishA product can't do everything for you... That's why there's API's like iControl and SNMP interfaces available. The data is there. You just have to present it. There's lots of tools to do that for you...
H - TechgeeegCome on Hamish... I am not asking the box to sense whats going on in my mind and translate it into a configuration on the box... these are the vital required reporting so really I am not buying the concept of every thing here... reporting do lack on these boxes and that is very true.
- TechgeeegWell what are we discussing... can you please refer me some valid documents as you are highly experienced with them I wana resolve this reporting thing. I came across some splunk stuff what is this can you explain.