Forum Discussion
sukru_isik_8872
Nimbostratus
Nimbostratusx-forwarded for
I have an apache server behind f5 VIP.I m using SNAT automap .To see client s real ip on server ,I enabled "x-forwarded for " option in http profile.
in access logs,I can see client's real ip; but in error logs,I see f5 self ip.how can I see clients real ip in error logs?
4 Replies
Kalpesh_48932I have same problem, even after tried many combinations of irule, it didn't worked?
looks like something wrong when its apache servers behind F5, and F5 is configured with Automap.
sukru_isik_8872I research a lot of document and I learn that error logs in apache can't be changed.
http://www.techstacks.com/howto/log-client-ip-and-xforwardedfor-ip-in-apache.html
so we can not add "x-forwarded" parameter into header.
only one solution stays: servers gateway must be f5 and than we can remove SNAT and we can see clients real ip.- Michael_YatesThe Apache Servers can be configured to log the X-Forwarded-For Header information in its logs, so I am assuming that you are wanting the True Client IP Address logged in your F5 LTM Logs.
You can configure an iRule to grab and log that during a qualifying event, but it is event driven.
There are several examples on how to log that here: HTTP::header.
Hope this helps. - sukru_isik_8872I have already configured apache server to x-forwarded-for header information in its logs.
but I only see true client ip in access logs ,not error logs in apache servers.
how configuration can I do to see error logs in apache ?I dont know that.
