topic Re: CSM header modification to report true source-ip in Application Networking

CSM header modification to report true source-ip

joemarr_brodart — Wed, 01 Apr 2009 19:25:10 GMT

I have a need to modify the Source-IP in the HTTP header to report the client and not the loadbalancer IP. I've attempted to use the method listed in the documentation, however the client IP is not being logged:

module ContentSwitchingModule 5

vlan 120 client

ip address x.x.x.68 255.255.255.192 alt x.x.x.69 255.255.255.192

gateway x.x.x.65

vlan 121 server

ip address y.y.y.100 255.255.255.248 alt y.y.y.101 255.255.255.248

route z.z.z.149 255.255.255.255 gateway y.y.y.97

route w.w.w.117 255.255.255.255 gateway y.y.y.97

route v.v.v.117 255.255.255.255 gateway y.y.y.97

natpool POOL1 y.y.y.102 y.y.y.102 netmask 255.255.255.248

map HEADER-INSERT header

insert protocol http header Source-IP header-value %is

real TESTSERV1

address z.z.z.149

no inservice

real TESTSERV2

address w.w.w.117

no inservice

real TESTSERV3

address v.v.v.117

inservice

serverfarm TESTFARM

nat server

nat client POOL1

real name TESTSERV1

inservice

real name TESTSERV2

inservice

real name TESTSERV3

inservice

policy INSERT

header-map HEADER-INSERT

serverfarm TESTFARM

vserver TESTFARM

virtual x.x.x.70 any

serverfarm TESTFARM

advertise active

persistent rebalance

slb-policy INSERT

inservice

Do I have this correct?

Re: CSM header modification to report true source-ip

Syed Iftekhar Ahmed — Thu, 02 Apr 2009 04:54:22 GMT

Remove the serverfarm from the vserver configuration. Since you are using a policy, the serverfarm serves as a default serverfarm.

I am sure you understand this but just wanted to make sure

You wont see source IP as "source ip" of the request. This config will ensure that your http header will include a header "Source-IP" with source ip of request as the header value.

Syed

Re: CSM header modification to report true source-ip

joemarr_brodart — Thu, 02 Apr 2009 13:43:02 GMT

Did you mean remove the serverfarm from the policy? If I remove it from the vserve, wont this break lb if I have multiple differnet serverfarms and vservs?

As for the Source-IP, I assume this means I need to modify Apache/IIS to add this header to the log entry?

Re: CSM header modification to report true source-ip

Syed Iftekhar Ahmed — Thu, 02 Apr 2009 21:48:55 GMT

I mean

vserver TESTFARM

virtual x.x.x.70 any

serverfarm TESTFARM <-- is not needed

advertise active

persistent rebalance

slb-policy INSERT <-- SF is already referenced here

inservice

Syed