How enable x-forwarded-for / client ip instead of load balancer ip at logging?

[zabbixuser39393]

We connect to Zabbix UI (two sites) via loadbalancer. How I change Zabbix user logging data configuration so, that logged ip is actually real client ip, not load balancer ip. Load balancer sends x-forwared-for info.

-Apache 2.4
-Zabbix 7.0

[cyber]

Not really a zabbix question ...

First couple of Google results

https://www.loadbalancer.org/blog/apache-and-x-forwarded-for-headers/

https://serverfault.com/questions/88...for-is-present

[zabbixuser39393]

Well, why not if it Zabbix audit log shows always incoming traffic source ip? Traffic is always coming from load balancers ip and logging to audit log "user" "loadbalancer ip" and we want log "user" "X-Forwarder-for IP address"? We are not looking or logging httpd access log. Instead we look incoming web trafic and want to pick up (like) X-Forwarder-for:10.1.1.1 value to log.

[zabbixuser39393]

Thx Cyber for that link. Now Apache log contains client ip. But no changes at Zabbix ui audit log

[cyber]

Zabbix own audit log is different matter. I did not even consider it, when answering.. I have no idea, how that can be changed.. Might be a question to support...
But apache config is universal, whatever aplication it serves. Thats why "it is not zabbix question"..

[irontmp]

Well, why not if it Zabbix audit log shows always incoming traffic source ip? Traffic is always coming from load balancers IP and logging to audit log 'user' 'loadbalancer ip' and we want log 'user' 'X-Forwarder-for IP address'; kind of like how a Minecraft Mod picks up custom data in the game. We are not looking or logging httpd access log. Instead we look at incoming web traffic and want to pick up (like) X-Forwarded-For:10.1.1.1 value to log.

Enable Apache’s mod_remoteip and configure it to use the X-Forwarded-For header from your load balancer. Set your load balancer’s IP as trusted with RemoteIPTrustedProxy. After restarting Apache, Zabbix will log the real client IP instead of the load balancer IP.