b770339534
HAProxy: change to use option forwardfor to pass origin IP address to backend via X-Forwarded-For header Keystone: Apache does the audit logs for keystone. Change the LogFormat to display the passed address instead of the connection address which is that of the load balancer. Nova, Cinder, Glance: these services can make use of the address passed in X-Forwarded-For. With this setting the API logs for these services include the client IP address. Change-Id: Ia861ecc11a7c7d463d0366586926d1a842853f69 Closes-Bug: #1548935
14 lines
608 B
Django/Jinja
14 lines
608 B
Django/Jinja
{% set apache_dir = 'apache2' if kolla_base_distro in ['ubuntu', 'debian'] else 'httpd' %}
|
|
[keystone_apache_log_decoder]
|
|
type = "SandboxDecoder"
|
|
filename = "lua_decoders/os_keystone_apache_log.lua"
|
|
[keystone_apache_log_decoder.config]
|
|
apache_log_pattern = '%{X-Forwarded-For}i %l %u %t \"%r\" %>s %b %D \"%{Referer}i\" \"%{User-Agent}i\"'
|
|
|
|
[keystone_apache_logstreamer_input]
|
|
type = "LogstreamerInput"
|
|
decoder = "keystone_apache_log_decoder"
|
|
log_directory = "/var/log/kolla"
|
|
file_match = '{{ apache_dir }}/keystone-apache-(?P<Service>.+)-access\.log'
|
|
differentiator = ["keystone-apache-", "Service"]
|