Log of "Insert X-Forwarded-For HTTP header"

[m1xed0s]

I am trying to understand log messages for load balancer app profile with Insert X-Forwarded-For HTTP header enabled? I am using syslog server and want to know the log file name and format of the log message.

Will the real user IP be logged on ESG LB Syslog OR will the real user ip be logged on backend servers OR both?

Do you have a sample I can reference to?

Thanks,

/S

[Sreec]

For backend server to view orginating source IP we use x-forwarding which is limited to HTTP traffic. However ESG will always see the original IP ,irrespective there is X-forwarding or not.

Kindly refer->NSX-v 6.4 - Load Balancing capabilities + configuration examples (and more...)

[m1xed0s]

So no related syslog messagea captured on the ESG LB service?

[sjason · Accepted solution]

If you configure syslog on the ESG and enable logging on the LB service, the syslog messages contain the client IP, URL, response code, VIP name, pool member and response time.

[m1xed0s]

Okey...I think I confused myself when posting this early...

i had the mindset of backend server to think about ESG LB logging of client ip...of course ESG will see and log real client ip, no matter XFF is enabled or not...

thanks.