Forum Discussion

eduardo_26187's avatar
eduardo_26187
Icon for Nimbostratus rankNimbostratus
Feb 16, 2010

log web activity from http server or bigip?

Hi everyone     I want find the best way to log the activity for an apache ihs web server.     I have the big-ip redirecting traffic to http server, but checking the access_log...
management
monitoring
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Feb 16, 2010
Hi Eduardo,

 

 

If it's only for HTTP or HTTPS being decrypted on LTM, it would be easier and more efficient to configure LTM to insert the original client IP address in the X-Forwarded-For header and then set Apache to log this custom HTTP header.

 

 

SOL4816: Using the X-Forwarded-For HTTP header to preserve the original client IP address for traffic translated by a SNAT

 

https://support.f5.com/kb/en-us/solutions/public/4000/800/sol4816.html

 

 

It is possible to use the approach you originally suggested, but that would require resource intensive logging of all HTTP requests from LTM.

 

 

Aaron