Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add the Source IP of the DCCG traffic to the logs #202

Closed
rschombu opened this issue Aug 30, 2022 · 1 comment
Closed

Add the Source IP of the DCCG traffic to the logs #202

rschombu opened this issue Aug 30, 2022 · 1 comment
Assignees
Labels
2nd Prio - Medium Indicates an issue with medium priority enhancement New feature or request

Comments

@rschombu
Copy link
Collaborator

rschombu commented Aug 30, 2022

Current Implementation

The DCCG doesn't log the information SourceIP for the connection between the DCCG and national backend.

Suggested Enhancement

Currently DCCG have a piece of logic that extract from http headers the thumbprint of the mTLS certificate used to connect

This headers extraction logic should be able to add another field from the same data block containing the thumbprint.
--> The XFF : https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Forwarded-For

What we would like to have is an additional field : sourceIP added to the logs (/ec/local/tomcat/logs/dgcg.log) with the value found in that XFF headers.

The Source IP (if governance is properly followed) are IP from national backends , and doesn’t contains private data.

Check with the developers on your side the complexity level of this change.
If the change is pushed into the codebase, we will then coordinate with the Splunk team for the actual deployment.
--> They want this to be pushed in phase (TST/ACC/PROD) to validate no side effect on the logs key/value extraction.

Expected Benefits

it helps the OPS team to improve the root cause analysis for any issue with the connection / transaction.

@rschombu rschombu added the enhancement New feature or request label Aug 30, 2022
@rschombu rschombu added the 2nd Prio - Medium Indicates an issue with medium priority label Aug 30, 2022
@f11h
Copy link
Contributor

f11h commented Sep 6, 2022

implemented by #203

@f11h f11h closed this as completed Oct 24, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
2nd Prio - Medium Indicates an issue with medium priority enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

3 participants