Forum Discussion

Cameron_14291's avatar
Cameron_14291
Icon for Nimbostratus rankNimbostratus
Apr 24, 2012

SNAT IP is messing up Auditing

Greetings....

 

 

I am an F5 newbie.

 

We have a VIP set up using SNAT to access our Application servers.

 

The auditing tool we use to identify unique users does not work as it always registers the SNAT IP.

 

 

Is there a way to configure an iRule to have the packet include the original source IP address?

 

 

 

Thank you in advance for any help...!

 

 

application delivery
dev
devops
iRules
  • johns's avatar
    johns
    Icon for Employee rankEmployee
    Apr 24, 2012
    If it is HTTP or HTTPS app (and your offloading SSL on the BIG-IP), then you can use the HTTP profile to insert client IP and extract in on the server for logging it in usual location.

     

     

    With Apache, this is pretty trivial as illustrated in article at the following link:

     

    http://devcentral.f5.com/weblogs/macvittie/archive/2008/06/02/3323.aspx

     

    With IIS, it requires a bit more work to accomplish:

     

    http://devcentral.f5.com/weblogs/Joe/archive/2009/08/19/x_forwarded_for_log_filter_for_windows_servers.aspx