9.11.3 Service Logging

Service directive: ForwardedHeader "name"

Defines the name of the HTTP header that carries the list of proxies the request has passed through. Default value is X-Forwarded-For. This header is used to determine the originator IP address for logging. See %a, for details.

Service directive: TrustedIP

Defines a list of trusted proxy IP addresses, which is used to determine the originator IP.

See %a, for a detailed discussion.

This statement is a special form of ACL statement, described in ACL. It can appear in two forms: as a section or as a directive. When used as a section, it is followed by a list of one or more CIDRs each appearing on a separate line. The End keyword terminates the statement, e.g.:

TrustedIP
  "127.0.0.1/8"
  "10.16.0.0/16"
End

In directive form, this statement takes a single argument, the name of an access control list defined earlier using the ACL statement, e.g.

TrustedIP "proxy_addresses"

Service directive: LogSuppress class [class...]

Suppresses HTTP logging for requests that resulted in status codes from the specified classes. Valid classes are:

info

1

‘1xx’ response codes.

success

2

‘2xx’ response codes.

redirect

3

‘3xx’ response codes.

clterr

4

‘4xx’ response codes.

srverr

5

‘5xx’ response codes.

all

All response codes.

This statement is designed for services that receive a constant stream of similar HTTP requests from a controlled set of IP addresses, such as e.g. Openmetric services. See Metrics, for an example.