#1 2015-03-02 14:37:18

anhyzer

Log client's IP when behind F5 LBD?

We’ve followed Frank DeRienzo’s guide to configure our Connect servers (3-server cluster) to leverage our F5 load-balancing device with SSL acceleration (http://www.connectusers.com/tutorials/2 … /index.php). The setup works fine with one exception: all traffic appears in the Connect logs with the source IP addresses of the F5’s virtual IPs rather than the IP address of the actual client. In an effort to log the actual client IP address, we configured the F5 LBD to send the “X-Forwarded-For” HTTP header. Through the use of Wireshark packet analyzer, we confirmed that the backend NICs are receiving the X-Forwarded-For header, but the Connect logs continue to show the source IP as that of the F5’s VIP.

Is it possible to configure a Connect cluster running behind an F5 LBD to log the actual client IP addresses rather than the F5’s VIP?

Thanks
--Chris

(I've opened a ticket to ask Adobe Support this question, but always like to ask here too in case an on-prem admin has already solved this problem.)

Sergio

Re: Log client's IP when behind F5 LBD?

Chris,

This article will tell you where to edit the tomcat log settings on your Connect server
http://blogs.adobe.com/connectsupport/o … cess-logs/[

This one will tell you how to configure client-side IP logging that is forwarded from your F5
http://www.techstacks.com/howto/log-cli … apache.htm

If you have a dev Connect server perhaps you can try setting this up.  If successful, please share.

Thanks,
Sergio