Netscaler USIP Configuration

์›น ์„œ๋ฒ„๋ฅผ ์šด์˜ํ•˜๋‹ค๋ณด๋ฉด Source IP๊ฐ€ ํ•„์š”ํ•œ ๊ฒฝ์šฐ๊ฐ€ ๋งŽ์Šต๋‹ˆ๋‹ค. ์›น์„œ๋ฒ„์—์„œ Log ์„ค์ •์˜ Parameter๋ฅผ ์ถ”๊ฐ€ํ•ด์•ผ๋˜๊ณ , ์‹ฌ์ง€์–ด Load Balancer์— ๋”ฐ๋ผ Source IP๊ฐ€ ์ฐํžˆ์ง€ ์•Š๋Š” ๊ฒฝ์šฐ๋„ ๋ฐœ์ƒํ•˜๊ธฐ๋„ ํ•ฉ๋‹ˆ๋‹ค.

Netscaler VPX๋Š” USIP(Use Source IP) ๊ธฐ๋Šฅ์„ ์‚ฌ์šฉํ•˜์—ฌ, ์ถ”๊ฐ€ ์„ค์ •์—†์ด ์›น ์„œ๋ฒ„์˜ Log์—์„œ ๋ฐ”๋กœ Source IP๋ฅผ ํ™•์ธํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค.
์ฐธ๊ณ ๋งํฌ : https://docs.citrix.com/en-us/netscaler/11/networking/ip-addressing/enabling-use-source-ip-mode.html

ํ•„์š” ์‚ฌํ•ญ :
– ์›น์„œ๋ฒ„ 1๋Œ€
– Netscaler VPX 1๋Œ€(Standard, Platinum ๋ชจ๋‘ ์ง€์›)

Control.softlayer.com์—์„œ SSL VPN์„ ์—ฐ๊ฒฐํ•œ ํ›„, Netscaler VPX ๊ด€๋ฆฌํŽ˜์ด์ง€๋กœ ์ ‘์†ํ•ฉ๋‹ˆ๋‹ค.

๊ด€๋ฆฌํŽ˜์ด์ง€์— ์ ‘์†ํ•œ ํ›„, Congifuration ํƒญ > Traffic Management ๋ฉ”๋‰ด > Load Balancing > Services๋กœ ์ ‘์†ํ•ฉ๋‹ˆ๋‹ค.

Service Name์„ ์ž…๋ ฅ, Existing Server ์„ ํƒ. ๋ฆฌ์ŠคํŠธ์—์„œ ์›น์„œ๋ฒ„ IP๋ฅผ ์„ ํƒ ํ›„, Done์„ ๋ˆŒ๋Ÿฌ ์„ค์ •์„ ์™„๋ฃŒํ•ฉ๋‹ˆ๋‹ค.

์„ค์ •์ด ์™„๋ฃŒ๋˜๋ฉด, ์ƒˆ๋กœ ์ถ”๊ฐ€ํ•œ Service๊ฐ€ ๋‚˜ํƒ€๋‚˜๊ณ  Edit๋ฅผ ํด๋ฆญํ•ฉ๋‹ˆ๋‹ค.

์ƒ์„ธ Edit ํŽ˜์ด์ง€์—์„œ Settings ํ•ญ๋ชฉ์˜ ์šฐ์ธก ์—ฐํ•„ ๊ทธ๋ฆผ์„ ํด๋ฆญํ•ฉ๋‹ˆ๋‹ค.

Settings ํ•˜๋‹จ์˜ Use Source IP Address ์˜ต์…˜์„ ์ฒดํฌ ํ›„, OK ๋ฒ„ํŠผ์„ ํด๋ฆญํ•˜์—ฌ ์„ค์ •์„ ์™„๋ฃŒํ•ฉ๋‹ˆ๋‹ค.

USIP ์„ค์ •์ด ์™„๋ฃŒ๋˜์—ˆ์œผ๋ฉฐ, ์›น์„œ๋ฒ„์— ์ ‘์†ํ•˜์—ฌ Log๋ฅผ ๊ฒ€์ƒ‰ํ•˜๋ฉด ์•„๋ž˜์™€ ๊ฐ™์ด Source IP๊ฐ€ Log์— ๋‚˜ํƒ€๋‚ฉ๋‹ˆ๋‹ค.

– USIP ๊ธฐ๋Šฅ Enable ์ „ โ€“
x.x.x.116 – – [30/Mar/2017:04:43:19 -0500] “GET /favicon.ico HTTP/1.1” 404 288 “http://x.x.x.115/” “Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.98 Safari/537.36”

– USIP ๊ธฐ๋Šฅ Enable ํ›„ –
x.x.x.33 – – [30/Mar/2017:04:47:33 -0500] “GET / HTTP/1.1” 403 4961 “-” “Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.98 Safari/537.36”

x.x.x.116 โ€“ ์›น ์„œ๋ฒ„ VM Public IP
x.x.x.33 โ€“ Client Public IP

Funded by JM Kim
Performed by JOON & IP

ํ† ๋ก  ์ฐธ๊ฐ€

์ด๋ฉ”์ผ์€ ๊ณต๊ฐœ๋˜์ง€ ์•Š์Šต๋‹ˆ๋‹ค. ํ•„์ˆ˜ ์ž…๋ ฅ์ฐฝ์€ * ๋กœ ํ‘œ์‹œ๋˜์–ด ์žˆ์Šต๋‹ˆ๋‹ค