[syslog-ng] Sylog-ng and F5 Load balancer.

[SZIGETVÁRI János]

Hi Peter,

Yes, opening a new issue on GitHub may be the best course of action.

So to summarize the alternatives:
* X-Forwarder-For is not feasible, because it's a HTTP header element,
and given that syslog traffic is non-HTTP, it's simply not applicable
* TCP option 28 (as it turned out it's not of the IP protocol, but
TCP) - an enhancement request should be opened for the syslog-ng
project

And finally an additional alternative solution that wouldn't require
any code change on syslog-ng side:
AFAIK the F5 LBs should be able to do NAT so that the original
sender's IP would be added as the source address for the forwarded
traffic.
It is possible that that would require some routing changes on the
network side, but it would be a viable way to preserve the source
addresses of forwarded traffic in a way that syslog-ng would be able
to use it.

Best Regards,
János Szigetvári
--
Janos SZIGETVARI
RHCE, License no. 150-053-692

LinkedIn: linkedin.com/in/janosszigetvari

__ at __˚V˚
Make the switch to open (source) applications, protocols, formats now:
- windows -> Linux, iexplore -> Firefox, msoffice -> LibreOffice
- msn -> jabber protocol (Pidgin, Google Talk)
- mp3 -> ogg, wmv -> ogg, jpg -> png, doc/xls/ppt -> odt/ods/odp

Peter Griggs <peter at petergriggs.co.uk> ezt írta (időpont: 2020. aug.
7., P, 9:41):
>
> Right I am with you – sorry been a long couple of days.
>
>
>
> What’s best way about getting this raised? Whack an issue up on GitHub?
>
>
>
> From: syslog-ng [mailto:syslog-ng-bounces at lists.balabit.hu] On Behalf Of Balazs Scheidler
> Sent: 07 August 2020 07:14
> To: Syslog-ng users' and developers' mailing list <syslog-ng at lists.balabit.hu>
> Subject: Re: [syslog-ng] Sylog-ng and F5 Load balancer.
>
>
>
> not at this point, this needs code additions to syslog-ng, that's what I meant "added to syslog-ng".
>
>
>
> On Fri, Aug 7, 2020 at 1:23 AM Peter Griggs <peter at petergriggs.co.uk> wrote:
>
> Do you have any config for syslog-ng for extracting this?
>
>
> Thanks
>
> Peter
>
>
>
> Get Outlook for Android
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
>
> --
>
> Bazsi
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>