cancel
Showing results for 
Search instead for 
Did you mean: 
Login & Join the DevCentral Connects Group to watch the Recorded LiveStream (May 12) on Basic iControl Security - show notes included.

i want to see what traffic hitting to virtual server

Gajji
Cirrus
Cirrus

i want to see what traffic hitting to virtual server , i heard there is some system irule we can apply on VS , which will show what traffic hitting to VS... on syslog

current traffic 0

but see on pool statistics some traffic is hitting on daily basis

4 REPLIES 4

mf5
Nimbostratus
Nimbostratus

you can log the traffic locally using irule, please check the link for more details

https://devcentral.f5.com/s/articles/the101-irules-101-logging-amp-comments

Samir
Nacreous
Nacreous

This irule will help you to check traffic hitting to virtual server and source IP address.

 

when HTTP_REQUEST { log local0. “Requested hostname: [HTTP::host] from IP: [IP::local_addr]” }

 

You can log locally for testing and debugging purposes, but you should use High Speed Logging to a syslog server if you are want to keep collecting logs.

 

The BigIP is not optimized for the significant I/O generated by high levels of local logging.

Smithy
Cirrostratus
Cirrostratus

Use this to create a HSL configuration: https://github.com/brett-at-f5/tmsh/blob/master/create_hsl_log_publisher.tmsh

 

Use this to log the full proxy connection (Client --> VS : SNAT --> Pool Member) via HSL: https://github.com/brett-at-f5/irules/blob/master/logging/log_ip_nat_hsl_irule.tcl

 

You can modify the above for Syslog format.