For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Biju's avatar
Biju
Icon for Nimbostratus rankNimbostratus
Jan 13, 2022

for Full proxy traffic ltm log... can i use below irule

 when CLIENT_ACCEPTED {   set clip [IP::client_addr]:[TCP::client_port]   set vip [IP::local_addr]:[TCP::local_port]   log local0.info "Request from CLIENT :$clip to VIP:$vip " } when HTTP_REQUE...
iRules
LTM
security
CA_Valli's avatar
CA_Valli
Icon for MVP rankMVP
Jan 13, 2022

Hello Biju,

iRule Syntax is correct, you'll start seeing logs when you apply it.

 

To me, this looks like a lot of logging for every request, which might fill up log files pretty quick (and possibly increase memory usage) depending on amount of traffic.

 

Keep in mind that F5 is not a logging server, so consider setting up a remote syslog if this info needs to be mantained (otherwise, log rotation process will periodically delete older log files).

 

There's commands for remote logging in irules as well