Forum Discussion

Matt_59095's avatar
Matt_59095
Icon for Nimbostratus rankNimbostratus
Aug 18, 2011

IP to DNS reverse lookup + Geo location? Delimitted format?

LTM 1500 9.4.8     Hi - we'd like to see where our website traffic is coming from, and by which companies. I'd prefer to log that into a format that i can read into a database table, so that i ...
application delivery
dev
devops
iRules
hooleylist's avatar
hooleylist
Icon for Cirrostratus rankCirrostratus
Aug 18, 2011
Actually, I need to correct myself. The whereis wiki page shows that this usage is allowed:

 

 

Logging data can contain location info and collected into a central logging solution for analysis of F5 logs.

 

 

So theoretically, you could upgrade to 10.1+ and then use High Speed Logging and send a message to a pool of syslog servers for each HTTP request with the GeoIP info. This should have relatively low overhead in terms of CPU/memory usage. I'd still avoid doing reverse DNS lookups on every client IP if you can do that easily off LTM.

 

 

http://devcentral.f5.com/wiki/iRules.whereis.ashx

 

http://devcentral.f5.com/wiki/iRules.hsl.ashx

 

 

Aaron