%

Relayd: Log

Article published the ; modified the
2 minutes to read

This article has 325 words.
RAW source of the article:
Commit version: e21600e

Description

OpenBSD has, by default, in basesystem, since 5.7, the relay server named relayd.

The purpose of this article is to learn how to set up a logging of the HTTP(S) stream that passes through relayd.

So very simple!

Configuration

  • File configuration is: /etc/relayd.conf

Global Configuration

In first, we need to declare the global parameter log into the file config. relayd.conf(5)#log

Explainations

The following log declarations are those signification:

  • log state changes and log host checks are useful to follow the state of the host or the checks. Those states can be of type:
    • up: if state is positive
    • down: if the host is down, or the checks are not good.
    • unknown: if the host is disable or not yet controled.
  • log connection: to log all the traffic TCP, only if relayd act as relay. 1 .
    Note: the option errors is useful when we will log only if TCP connections send errors.

1 In fact, relayd can be configured too as a router, or redirection server.

Filters rules

Relays are able to filter the connections by adding specific filters parameters.

We will use the action match on which we apply the logging option log. relayd.conf(5)#match
This corresponding action will apply on:

2 only available on HTTP request.

Configuration: example

The follow exampe show us five filters rules:

  • the first four on the matching header
  • the last log the complete URL

File: /etc/relayd.conf

Logs

All logs are visibles into:

  • /var/log/daemon,
  • /var/log/message.

log daemon: example

Code: sh

Into this example, we have:

  • done connections
  • failed connections, error 403, bloqued by filters rule block

log message: example

Code: sh

In this other example, we see 3 writing about bloqued rules, with error 403.

Documentations

Manpages