Enable the apache errorlog to show the real source IP

[eitanc]

Hello,

The error log of apache, at /usr/local/apache/logs/error_log , shows the IP of the reverse proxy system I work with.
I tried to find a way to change it to show the real source IP (e.g. xff , x-forwarded-for), of the actual request initiating client, but found only the following post:

How to Add "X-Forwarded-For" information to Apache Web Server access log and error log < Blog-D without Nonsense

Keywords: Apache 2.4, Apache show client IP Address behind proxy, access log, error log, access.log, error.log, X-Forwarded-For (For Apache 2.4 and newer versions) By default, the apache access log and error log will not log “X-Forwarded-For” information, so that if the client is connecting via...

dannyda.com

But before I dive into low level changes - I wonder, does CP has a way to do this "officially"?

 

[andrew.n]

mod_remoteip

Restoring visitors IP with mod_remoteip

Introduction Sometimes you'll have traffic come from another source such as Cloudflare, another proxy source, or a dedicated firewall. Apache offers mod_remoteip which will allow you to restore the...

support.cpanel.net

 

[eitanc]

Thanks Andrew, I already did it, but it affects only the access log, hence the visitors to the sites, not the error log, which still shows the proxy servers' IPs.

 

[cPRex]

Unfortunately there isn't a drop-in fix for the error log. There's some good discussion on this here:

Log clients real IP in Apache from haproxy

I have setup a pair of new haproxy (v1.5) load balancers, and put 2 webservers (apache on Centos 6) behind it. I've setup X-forwarded-for and I can see the clients real IP in the access_log on the

serverfault.com

which links to this guide:

core - Apache HTTP Server Version 2.4

but it would need to be manually configured.

 

[eitanc]

I added a feature request for this (currently waiting on moderation)

https://features.cpanel.net/topic/22795-enable-the-apache-errorlog-to-show-the-real-source-ip

 

[eitanc]

@cPRex - the above feature request is still on moderation, for 15 days... can you see how it can be approved?

 

[cPRex]

I reached out to the team and this has now been approved!

 

[eitanc]

I reached out to the team and this has now been approved!

Thanks!