Forum Discussion

ToonVA's avatar
ToonVA
Icon for Cirrus rankCirrus
Jun 20, 2019

Log client source IP when connecting to TCP Virtual by iRule

Hi All, I received the request if it is possible to log the client IP when connecting to the virtual IP. We did this already based on an HTTP Virtual but now it's for an SMTP relay with regular T...
BIG-IP
iRules
logging
security
Lee_Sutcliffe's avatar
Lee_Sutcliffe
Icon for Nacreous rankNacreous
when CLIENT_ACCEPTED {
    log local0. "Client IP:[IP::client_addr]"
}

 You'll need to do this in the CLIENT_ACCEPTED event as above

David_M's avatar
David_M
Icon for Cirrostratus rankCirrostratus
Jun 24, 2019

I dont know why I dont see my client connected firing at all!!

  • Lee_Sutcliffe's avatar
    Lee_Sutcliffe
    Icon for Nacreous rankNacreous
    Jun 24, 2019

    the CLIENT_ACCEPTED event triggers when a TCP three way handshake has been completed. If you're not seeing anything in the logs it may be because your ISP is multiplexing TCP connections. This is common if you have services behind Akamai for example.