For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

1qaz's avatar
1qaz
Icon for Nimbostratus rankNimbostratus
May 07, 2020

How can i log source ip and source port on SSL vip by irule?

I have a SSL VIP,I know that X-Forwarded-For can log the source address,but I want to log the source address and source port on F5.How can I get this by irule?thanks!

3 Replies

  • Below iRule will log the Source IP and Source Port and send to "/var/log/ltm"

    when CLIENT_ACCEPTED {
        log local0. "Source IP address and Port is [IP::client_addr]:[TCP::client_port]"
       }
  • 1qaz's avatar
    1qaz
    Icon for Nimbostratus rankNimbostratus

    thanks to Samir Jha,I have another question, I want to insert source addree and source port into the HTTP header,and send the package to server,How to write this irule?thanks! 

  • Try below irule. Hpe it will work.

    when HTTP_REQUEST { 
    	log local0. "Source IP address and Port is [IP::client_addr]:[TCP::client_port]"
        HTTP::header insert Client-IP [IP::client_addr]:[TCP::client_port]
    }