Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

mahanth's avatar
mahanth
Icon for Altostratus rankAltostratus
Aug 17, 2020

Can I run TMSH commands inside an iRule?

I have added:        set NODENAME [HTTP::header value test]  POOLMEMBER_IP=($(tmsh list ltm node $NODENAME | grep "address" | awk '{print $2}'))   1) I am trying to run tmsh commands using/i...
application delivery
irules
LTM
Dario_Garrido's avatar
Dario_Garrido
Icon for Noctilucent rankNoctilucent
Aug 18, 2020

Hello Mahanth.

I think you are mixing concepts. Take into account this:

  • TMSH are management plane scripts
  • iRule are dataplane scripts.

So, you cannot access a F5 config using iRule commands.

One idea that you could use is to resolv your server hostname using your DNS.

[lindex [RESOLV::lookup $hostname] 0]

REF - https://clouddocs.f5.com/api/irules/resolv__lookup.html

Regards,

Dario.

Rene_C_'s avatar
Rene_C_
Icon for Nimbostratus rankNimbostratus
Aug 18, 2020

Please note that with v15 RESOLV::lookup is deprecated and no longer supported!

  • Dario_Garrido's avatar
    Dario_Garrido
    Icon for Noctilucent rankNoctilucent
    Aug 18, 2020

    https://clouddocs.f5.com/api/irules/RESOLVER__name_lookup.html

    https://clouddocs.f5.com/api/irules/DNSMSG__record.html

  • Rene_C_'s avatar
    Rene_C_
    Icon for Nimbostratus rankNimbostratus
    Aug 18, 2020

    which just includes that it can no longer be written nicely on one line...or 2...or 3... :)

  • JRahm's avatar
    JRahm
    Icon for Admin rankAdmin
    Aug 20, 2020

    deprecated just means it is marked for removal in a future version. As long as it's still available it will be supported.

  • Rene_C_'s avatar
    Rene_C_
    Icon for Nimbostratus rankNimbostratus
    Aug 21, 2020

    Trust me, with v15 you dont want to use that anymore, unless you are ready for core dumps....

  • Rene_C_'s avatar
    Rene_C_
    Icon for Nimbostratus rankNimbostratus
    Aug 21, 2020

    Yeah, thats the one we raised. And it has a workaround but its not so easy to implement depending on the environment you have, since we have a complete custom dev cycle for irules. But, well.

  • JRahm's avatar
    JRahm
    Icon for Admin rankAdmin
    Aug 21, 2020

    Ok fair enough, Rene! 😃

     

    But generally, deprecated doesn't mean immediate death sentence. Test, test, then test some more, and as I recommend with any new release, comb the release notes and if there is a better way forward with any implementation, iterate through those updates as resources allows.