Forum Discussion
Omar_69447
Nimbostratus
NimbostratusHow to Log Client IP in IIS logs other than x-forward-for?
I have web services that are setup as Passthrough on F5. I am trying to find a way to log client source ip in IIS logs. x-forward-for don't seem to work in Passthrough setup. Is there any other way t...
Simon_Blakely
Employee
EmployeeWhat do you mean by Passthrough - do you mean a standard virtual server performing SNAT with no client or server SSL profile?
If so, then you might be able to use
Implementing Proxy SSL on a Single BIG-IP System
to insert the x-forwarded-for header while allowing the client and server to directly authenticate.
However, this does depend on whether the negotiated TLS cipher is an RSA cipher.
Otherwise, there is nothing you can do without disabling SNAT on the virtual and routing all the server responses back via the LTM, or using a FastL4 virtual with loose-initiation/loose close and Direct Server Return/nPath routing.
