V3 Idp - how to get client IP address in load balanced server

[Jarno Huuskonen]

On Wed, Jul 19, Ramaiah, Vanna G. wrote:
> My idp set up is: client->load balancer->tomcat8
> Do I need to have MDCInsertingServletFilter in web.xml to use the x-fowarded-for value?

We use remoteipvalve / %mdc{idp.remote_addr}:
https://tomcat.apache.org/tomcat-8.0-doc/api/org/apache/catalina/valves/RemoteIpValve.html
https://wiki.shibboleth.net/confluence/display/IDP30/LoggingConfiguration

You'll probably want to configure loadbalancer to make sure that
x-forwarded-for is set by the lb.

-Jarno

> 
> -----Original Message-----
> From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
> Sent: Tuesday, July 18, 2017 9:34 PM
> To: Shib Users <users at shibboleth.net>
> Subject: Re: V3 Idp - how to get client IP address in load balanced server
> 
> 
> 
> On 7/18/17, 2:26 PM, "users on behalf of Ramaiah, Vanna G." <users-bounces at shibboleth.net on behalf of ramaiah at musc.edu> wrote:
> 
> > I need to log the client ip address in audit logs. Shib servers are load balanced. Apache logs are showing the client ip address.
> 
> https://wiki.shibboleth.net/confluence/display/IDP30/AuditLoggingConfiguration
> 
> -- Scott

-- 
Jarno Huuskonen