ACE 4710 A3(5) Logging new connections

[btorrens1]

We have recently transitioned one of our Ecommerce products to a new data center, at which we now use a one-armed load balancing approach rather then the routed load balancing approach we used previously. This is casuing us some issues as we generally log the source IP address a user comes in on when he fills out an application. Now the logs only show the natted ip address recieved by the load balancer, which does us no good. What I was hoping is that someone knew a way to log the source IP address when a new connection is created to a particular vip? Any ideas?

[litrenta]

If this is http traffic you can have the ace insert a header such as X-Forwarded-For and insert the original client ip.

The you would have your server log this ip from the header (do google search on X-forwarded-for for server details )

see:

http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/ace_appliances/vA3_1_0/configuration/slb/guide/classlb.html#wp1131842

for how to do header insert.

IF the connection is not http the only way to preserve client ip would be to use policy-based routing to get the server return traffic back to the ace instead of using source nat.

[btorrens1]

The connections will be https.

[btorrens1]

If this is http traffic you can have the ace insert a header such as X-Forwarded-For and insert the original client ip.

So your saying something like....

header insert request X-Forwarded-For %is

and insert this parameter map to the virtual server? Will this work for HTTPS?

The you would have your server log this ip from the header (do google search on X-forwarded-for for server details )

see:

http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/ace_appliances/vA3_1_0/configuration/slb/guide/classlb.html#wp1131842

for how to do header insert.

IF the connection is not http the only way to preserve client ip would be to use policy-based routing to get the server return traffic back to the ace instead of using source nat.