Ed Dolle (Customer) asked a question.
Is there anything on the load balancer side that I have to configure to display the client IP in the IIS logs? I have the XFF header configured in IIS logging, but the only thing I get is a hyphen.
Hi Ed,
The X-Forwarded-For method should allow you to obtain the connecting client ip within the IIS logs. Were you able to follow our configuration guide on the subject? https://community.progress.com/s/article/How-to-Add-an-X-Forwarded-For-Header-and-Configure-IIS-Logging
Note: This can only be used for HTTP, SSL-offloaded or SSL re-encrypted HTTPS services.
Best Regards,
Is there anyway to gather this information from the load balancer when it is being sent to an Exchange server?
Hi Ed,
The MS Exchange traffic in question: is that HTTP traffic, SMTP, or something else?
For non-HTTP traffic you can use transparency to preserve the client's source IP address. Then, the backend server will see traffic as originating from the client's real IP address, and will log it as such. There are architectural considerations to make transparent load balancing work, though.
I hope this helps.
Thanks,
Andrew
Hi Ed,
In that case, you'll need to make sure you're terminating TLS at the LoadMaster (so that it can modify the underlying HTTP traffic and add in X-Forwarded-For header fields).
Enable one of the X-Forwarded-For modes for the virtual service that handles your HTTP traffic, under the Advanced Properties tab:
Microsoft have some Exchange-specific instructions on how to enable X-Forwarded-For logging when using e.g. a Kemp LoadMaster: see here:
(That looks broadly the same as the IIS XFF instructions, to my eyes.)
Thanks,
Andrew
Hi Ed,
The X-Forwarded-For method should allow you to obtain the connecting client ip within the IIS logs. Were you able to follow our configuration guide on the subject? https://community.progress.com/s/article/How-to-Add-an-X-Forwarded-For-Header-and-Configure-IIS-Logging
Note: This can only be used for HTTP, SSL-offloaded or SSL re-encrypted HTTPS services.
Best Regards,