Forum Discussion

rakchart_74937's avatar
rakchart_74937
Icon for Nimbostratus rankNimbostratus
May 06, 2009

How to logging SNAT Pool translation list with irules?

We dooes configurae Link Controller Loadbelance outbound traffic to Internet with SNAT Pool public IP.

 

We need to logging translation list

 

 

CLient Address --> Public IP --> Remote Address

 

 

How to logging SNAT Pool translation list with irules?

 

 

 

Best Regards,
application delivery
dev
devops
iRules
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    May 06, 2009
    You should be able to adapt a rule like this to log the original client, SNAT and destination IP addresses: 

     
 when SERVER_CONNECTED { 
  
    log local0. "[IP::client_addr], [IP::local_addr], [IP::server_addr]" 
 }

    I haven't tested this with a link controller, but I think a layer4 based iRule should work okay.

    Aaron
  • dennypayne's avatar
    dennypayne
    Icon for Employee rankEmployee
    May 06, 2009
    Should work, but I'd be careful with putting a rule like this on a high-volume site...you don't want to fill up /var/log and cause performance problems.

     

     

    Denny
  • JRahm's avatar
    JRahm
    Icon for Admin rankAdmin
    May 13, 2009
    If you are on 9.4 or higher you can send directly to a remote log server so you can log higher volumes without being impacted by the disk access necessary for local writes:

     

     

    log x.x.x.x local0.info "[IP::client_addr], [IP::local_addr], [IP::server_addr]"