Tuesday, December 16, 2008

BigIP LTM and Apache - Capturing Client IP in access log

Tracking end client IP in web server logs
-----------------------------------------

1) In BigIP, navigate to Local Traffic >> HTTP Profiles >> http

Enable "Insert XForwarded For" option
Update to save the configuration.

http profile is just an example. You should set this option for whatever profile the pool is using.

2) In Apache (or IBM HTTP Server) httpd.conf

LogFormat "\"%{X-Forwarded-For}i\" %h %v %l %u %t \"%r\" %>s %b" mycustom
CustomLog "/opt/IBM/HTTPServer/bin/rotatelogs /var/logs/test-443-access.log.%Y-%m-%d 86400"mycustom

The output access logfile should contain client IP


No comments: