SSL Proxy IP Logging?

Events happening in the community are now at Drupal community events on www.drupal.org.
Ari Gold's picture
Posted by Ari Gold on November 26, 2011 at 6:39pm

I'm using the recipe to use multiple IPs on my server for multiple SSL enabled sites:
https://github.com/omega8cc/nginx-for-drupal/blob/master/docs/SSL.txt

Is there a way to discover the visitor's ip when the visitor is using https?

All log entries in /var/log/nginx/access.log show the IP of my server in upstream extra_ip and not hte visitor's ip.

thanks

Comments

Yes, just comment out the

Posted by memtkmcc on December 2, 2011 at 10:49pm
memtkmcc's picture

Yes, just comment out the line access_log off; in the /var/aegir/config/server_master/nginx/pre.d/nginx_wild_ssl.conf file and restart Nginx. It will cause duplicate log entries (one with real visitor IP and one with server IP), but at least all of them will be logged also with real IPs. There is no workaround to avoid duplicate entries as log_format directive can't be used inside if to switch logged IP for local proxy conditionally on the fly.

Above how-to is for standard

Posted by memtkmcc on December 2, 2011 at 10:52pm
memtkmcc's picture

Above how-to is for standard SSL proxy, installed by default by Barracuda. For your extra SSL enabled vhosts comment out or remove the same line and restart Nginx.

thank you

Posted by Ari Gold on December 7, 2011 at 3:26pm
Ari Gold's picture

i thought i tried that, but I then made sure to comment out every access_log off; in all files in pre.d and that did the trick

BOA

Group organizers

Group notifications

This group offers an RSS feed. Or subscribe to these personalized, sitewide feeds: