Hi Peter, Yes, opening a new issue on GitHub may be the best course of action. So to summarize the alternatives: * X-Forwarder-For is not feasible, because it's a HTTP header element, and given that syslog traffic is non-HTTP, it's simply not applicable * TCP option 28 (as it turned out it's not of the IP protocol, but TCP) - an enhancement request should be opened for the syslog-ng project And finally an additional alternative solution that wouldn't require any code change on syslog-ng side: AFAIK the F5 LBs should be able to do NAT so that the original sender's IP would be added as the source address for the forwarded traffic. It is possible that that would require some routing changes on the network side, but it would be a viable way to preserve the source addresses of forwarded traffic in a way that syslog-ng would be able to use it. Best Regards, János Szigetvári -- Janos SZIGETVARI RHCE, License no. 150-053-692 LinkedIn: linkedin.com/in/janosszigetvari __@__˚V˚ Make the switch to open (source) applications, protocols, formats now: - windows -> Linux, iexplore -> Firefox, msoffice -> LibreOffice - msn -> jabber protocol (Pidgin, Google Talk) - mp3 -> ogg, wmv -> ogg, jpg -> png, doc/xls/ppt -> odt/ods/odp Peter Griggs <peter@petergriggs.co.uk> ezt írta (időpont: 2020. aug. 7., P, 9:41):
Right I am with you – sorry been a long couple of days.
What’s best way about getting this raised? Whack an issue up on GitHub?
From: syslog-ng [mailto:syslog-ng-bounces@lists.balabit.hu] On Behalf Of Balazs Scheidler Sent: 07 August 2020 07:14 To: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu> Subject: Re: [syslog-ng] Sylog-ng and F5 Load balancer.
not at this point, this needs code additions to syslog-ng, that's what I meant "added to syslog-ng".
On Fri, Aug 7, 2020 at 1:23 AM Peter Griggs <peter@petergriggs.co.uk> wrote:
Do you have any config for syslog-ng for extracting this?
Thanks
Peter
Get Outlook for Android
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
--
Bazsi
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq