Forum Discussion

sukru_isik_8872's avatar
sukru_isik_8872
Icon for Nimbostratus rankNimbostratus
Jul 21, 2013

x-forwarded for

I have an apache server behind f5 VIP.I m using SNAT automap .To see client s real ip on server ,I enabled "x-forwarded for " option in http profile.

 

in access logs,I can see client's real ip; but in error logs,I see f5 self ip.how can I see clients real ip in error logs?

 

 

 

  • I have same problem, even after tried many combinations of irule, it didn't worked?

     

     

    looks like something wrong when its apache servers behind F5, and F5 is configured with Automap.
  • I research a lot of document and I learn that error logs in apache can't be changed.

     

     

    http://www.techstacks.com/howto/log-client-ip-and-xforwardedfor-ip-in-apache.html

     

     

    so we can not add "x-forwarded" parameter into header.

     

    only one solution stays: servers gateway must be f5 and than we can remove SNAT and we can see clients real ip.
  • The Apache Servers can be configured to log the X-Forwarded-For Header information in its logs, so I am assuming that you are wanting the True Client IP Address logged in your F5 LTM Logs.

     

     

    You can configure an iRule to grab and log that during a qualifying event, but it is event driven.

     

     

    There are several examples on how to log that here: HTTP::header.

     

     

    Hope this helps.
  • I have already configured apache server to x-forwarded-for header information in its logs.

     

    but I only see true client ip in access logs ,not error logs in apache servers.

     

    how configuration can I do to see error logs in apache ?I dont know that.