cloudstack-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Erik Weber <terbol...@gmail.com>
Subject Re: Port forwarding (web) - doesnt show real client IP
Date Mon, 08 Dec 2014 23:02:22 GMT
On Mon, Dec 8, 2014 at 11:42 PM, Andrija Panic <andrija.panic@gmail.com>
wrote:

> Hi,
>
> when doing port forwarding on VPC VR - port 80 - when some client access
> web site - only the main Public IP of the VPC is logged in apache access
> logs as remote IP.
>
> Why is this behaviour - and can this be changed ?
> My understanding is that this is kind of bug (unless needed for some other
> reasons) - port forwading is DNAT in essence, so only the destination
> IP/port should be changed, not proxied all the way, as it seems to be the
> case here...
>
> I read on other guys mailing list - same behavior for loadbalancer...
>
>
This is common for all load balancers.
Haven't checked, but you could see if the CloudStack LB expose the client
IP as X-Forwarded-For header, which is the normal way of doing it.


-- 
Erik

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message