For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Fletcher_Cocquy's avatar
Fletcher_Cocquy
Icon for Nimbostratus rankNimbostratus
Mar 06, 2007

loadbalancing IIS (wentrends smartsource)

Hi,   It looks like f5isapi.dll may solve my issue - I am searching for a reference on how to implement the integration of Microsoft IIS and BigIP 9.1.x     I am loadbalancing two webtrends s...
microsoft
partner
Ryan_Korock_46's avatar
Ryan_Korock_46
Historic F5 Account
Mar 07, 2007
Fletcher, it sounds like you need to log the true IP address of the client on your IIS servers, however the source IP is being rewritten because you are SNATting the connection on the BIG-IP.

 

 

Is this the case?

 

 

If so, you'll need to configure the BIG-IP to insert the true source IP into the http header (Insert XForwarded For).

 

 

Then you will want to configure IIS to create logs using the IP address in the http header, and not the source IP of the packet (which is now the BIG-IP IP address because of the SNAT). Take a look at Joe's post here -> http://devcentral.f5.com/weblogs/joe/archive/2005/09/23/1492.aspx. Joe wrote an ISAPI filter that will actually force IIS to create the log based off of the IP in the http header.

 

 

-Ryan