F5 IIS 10 Original c-ip - x-forwarded-for

Question

Greetings everyone,
We have a F5 LB who is handling all the load for our web servers. 
But there is a problem when reading the IIS logs for the original client ip ( we have SNAT that shows the virtual IP instead of client ip).&nbsp;
So far i have only found that IIS 10 supports enhanced logging and you can set your own input for x-forwarded-for.
My question is, if we enable x-forwarding-for in the F5 - Services - HTTP and add the enhanced loggin for IIS10 custom field - can we get the original client ip ? &nbsp;
Sorry if this is posted before but i couldn't find the question.&nbsp;
Thanks forward.
Z.&nbsp;

daniel_varela · Answer

That setting actually does that...insert the X-Forwarded-for header with the original IP so it will be available to your IIS server. &nbsp;

amintej · Answer

In the next article is described how to add X-Forwarder-For Header to the site logs:&nbsp;
https://docs.microsoft.com/en-us/iis/get-started/whats-new-in-iis-85/enhanced-logging-for-iis85&nbsp;

Forum Discussion

F5 IIS 10 Original c-ip - x-forwarded-for

2 Replies

Recent Discussions

Import PKCS 12 SSL to Device Certificate via API/Script or CLI on BIG-IP

Help with URL Masking

F5 iRule to replace host to path

Chrome V 124+ on MacOS - Virtual Server Access Issue

F5 Rseries R2600 Tenant sizing

Related Content

TCP Option 28 X-Forwarded-For Header

X-Forwarded-For on L4 VS

Extracting X-Forwarded-For in Node.js

X-Forwarded-For Log Filter for Windows Servers

F5 Distributed Cloud Origin Server Subset Rules