Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 8 replies
  • Answers 2 answers
  • Subscribers 39 subscribers
  • Views 4106 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Monitor WAF routing

max.mo

Hello,

 

I have configured a WAF rule with path routing to 2 servers.

Everything seems working as expected but I want to know If trafic is well balanced between each servers.

Is there a way to find this information on the Sophos?

I tried tcpdump and web server protection logs but I cannot find this information.

 

Do you have any ideas or tips?

Thanks for your help.


Maxime



This thread was automatically locked due to age.
Parents
  • 0

    Hi,

    this information is available.

     

    Go to the Advanced Shell (Device Management >  Advanced Shell).

    Edit the reverseproxy.conf under /usr/apache/conf/httpd.conf

    Replace the line 'LogLevel notice' with 'LogLevel notice proxy:debug'

    Restart WAF: service WAF:restart -ds nosync

     

    In /log/reverseproxy.log, you should see lines like

    [...][proxy:debug] [...] HTTP: connection complete to 10.8.1.1:80 (yourwebserverA)

    [...][proxy:debug] [...] HTTP: connection complete to 10.8.1.2:80 (yourwebserverB)

     

    Best,

     Sabine

     

  • 0 in reply to Evianne

    Hello Sabine,

     

    Thanks for your answer.

    By modifying the reverseproxy.conf, did you mean the one under :

    There is no loglevel entry

    I can not find the one you mentionned :

     

    Thanks for your help.

  • 0 in reply to max.mo

    Sorry, my mistake.

     

    The line "Edit the reverseproxy.conf under /usr/apache/conf/httpd.conf"

    should have been "Edit the httpd.conf under /usr/apache/conf/httpd.conf"

  • 0 in reply to Evianne

    Hello,

     

    We tried to edit the file but it says that we can't because the file is in read only.

    Do we need to stop the service first?

     

    Thanks.

    Best Regards,
    Maxime

Reply Children
Unfiltered HTML