ECS：如何為具有負載平衡器的 ECS 配置「X-Forwarded-For」

Summary: 下列所提供的步驟可在 ECS 中啟用「X-Forwarded-For」功能，因此如果負載平衡器已設定為將原始 IP 位址傳遞至 ECS 也會在記錄檔中擷取該位址。

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Instructions

在 ECS 中使用 F5 的 Big IP 等負載均衡器時，可以傳遞原始 IP 位址，以便顯示在 ECS 紀錄檔中。
注意：  僅當負載均衡器上啟用了“X-Forwarded-For”時，此功能才有效。（詳情請參閱下文）*。

在 ECS 內啟用 X-Forwarded-For 的步驟。 

1.以系統管理員身分將 shell 安全連線至 ECS 節點。

2.執行以下命令，檢查之前是否設置了參數。
命令： #svc_param info com.emc.ecs.objheadsvc.request_log.headers
範例 1：如果之前從未設定過，請參閱以下輸出。 

admin@ecsnode1:~> svc_param info com.emc.ecs.objheadsvc.request_log.headers
svc_param v1.2.2 (svc_tools v2.11.1)                 Started 2023-07-31 18:13:45


Param: com.emc.ecs.objheadsvc.request_log.headers

  Description                     comma sep list of headers to log
  Default value (active)
  Configured Value                < Never modified >
  Modification reason             None
  Last modified                   None

範例 2：  下面的示例指示參數是在之前設置的。 

admin@ecsnode1:~>  svc_param info com.emc.ecs.objheadsvc.request_log.headers
svc_param v1.2.2 (svc_tools v2.11.1)                 Started 2023-07-31 18:15:05

WARNING   Could not get REST auth token from IP '127.0.0.1' - Connection failed

Param: com.emc.ecs.objheadsvc.request_log.headers

  Description                     comma sep list of headers to log
  Default value
  Configured Value (active)       X-Forwarded-For
  Modification reason             log request source ip address
  Last modified                   2023-07-31 18:14:32 UTC (1690827272918)


3.執行下列命令以啟用 X-Forwarded-For。
令：  #svc_param set -n com.emc.ecs.objheadsvc.request_log.headers -v "X-Forwarded-For" -r "log request source ip address"

範例：參數變更

admin@ecsnode1:~> svc_param set -n com.emc.ecs.objheadsvc.request_log.headers -v "X-Forwarded-For" -r "log request source ip address"
svc_param v1.2.2 (svc_tools v2.11.1)                 Started 2023-07-31 18:14:32

Param value changed.

Param: com.emc.ecs.objheadsvc.request_log.headers

  Description                     comma sep list of headers to log
  Default value
  Configured Value (active)       X-Forwarded-For
  Modification reason             log request source ip address
  Last modified                   2023-07-31 18:14:32 UTC (1690827272918)


4.若要確認是否已設定命令設定，請執行下列命令。 

admin@ecsnode1:~>  svc_param info com.emc.ecs.objheadsvc.request_log.headers
svc_param v1.2.2 (svc_tools v2.11.1)                 Started 2023-07-31 18:15:05

Param: com.emc.ecs.objheadsvc.request_log.headers

  Description                     comma sep list of headers to log
  Default value
  Configured Value (active)       X-Forwarded-For
  Modification reason             log request source ip address
  Last modified                   2023-07-31 18:14:32 UTC (1690827272918)


注意：

  1. 您只需要在一個節點上執行組態變更。它應該立即生效。
  2. 無需重新啟動任何服務。 
  3. 設定此參數不會影響任何影響 
  4. 若要確認轉送是否有效，請檢查 dataheadsvc.log 中的dataheadsvc.log檔案RequestLog.java
命令：  #svc_log -f 'X-Forwarded-For' -sr dataheadsvc-access -start 10m 
範例：這是包含轉送用戶端 IP 的範例記錄行。 
2017-03-13T14:57:38,591 [qtp947043383-731114]  INFO  RequestLog.java (line 83) 10.XXX.134.55 GET //10.XXX.134.55:9024/v1/9f2f0506dc2748ba98b52904ca44f89a?format=json▮=test-storage-16228-255 HTTP/1.0 200 865 - 3 'X-Forwarded-For: 10.XXX.134.56'


負載平衡器詳細資訊：
此功能僅在正確配置負載均衡器後有效。

F5 BigIP已在實驗室中進行了測試。  

例如，F5 BigIP 負載平衡器 -此鍵會將 ProxyPreserveHost 設定為開啟，並確定您在 HTTP 設定檔中啟用 x-forwarded-for。  
以下連結供有關如何配置 F5 BIG-IP 的查看：
此超連結會帶您前往 Dell Technologies 以外的網站。https://support.f5.com/csp/article/K4816

 

Affected Products

Elastic Cloud Storage

Products

Elastic Cloud Storage
Article Properties
Article Number: 000013873
Article Type: How To
Last Modified: 24 Apr 2025
Version:  8
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.