Forum Discussion

Kashif_Rana_493's avatar
Kashif_Rana_493
Icon for Nimbostratus rankNimbostratus
Feb 12, 2013

F5 LTM off path design (with SNAT) and client IP logging

Hi Experts   I have one deployment for F5 LTM 6900. We want to load balance below applications on different servers.   Exchange (OWA, MAPI, RPC OVER HTTP, OUTLOOK ANY WHERE) VDI (VIRTUAL DESK...
config
design
pete_71470's avatar
pete_71470
Icon for Cirrostratus rankCirrostratus
Feb 12, 2013
We have a similar situation where all traffic to nodes is SNAT'ed, mostly AutoMap, but some non-HTTP nodes need to log the connecting client's IP. We use a simple iRule to log the connection:

 

...

 

when SERVER_CONNECTED {

 

HSL::send $hsl "<190> CONNECT: client [IP::client_addr]:[TCP::client_port] vip [clientside {IP::local_addr}]:[clientside {TCP::local_port}] node [IP::server_addr]:[TCP::server_port]"

 

}

 

...