For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Rajesh_Loki_war's avatar
Rajesh_Loki_war
Icon for Nimbostratus rankNimbostratus
Aug 16, 2017

check connections from one VIP to other

Hi All,   I have created a new setup where i have a main VIP in which i have created an Irule, depending on the keyword it will send traffic to child VIPS where actual servers reside. This setup i...
application delivery
iRules
LTM
jaikumar_f5's avatar
jaikumar_f5
Icon for Noctilucent rankNoctilucent
Aug 16, 2017

I aint 100% sure, but here's what I know. The connections table tells you 4 fields,

cs-client-addr --> cs-server-addr --> ss-client-addr --> ss-server-addr

Assume the below,

Client IP - 10.10.10.10 VIP - 20.20.20.20 Self IP - 25.25.25.25 Pool Member - 30.30.30.30

tmsh show sys connection cs-client-addr 10.10.10.10

Result would show you client IP and the VIP and the Self IP and the Pool member to which it load balanced too. You can use the all-properties to see the clientside connection and serverside connection details.

Sys::Connections
10.10.10.10:50915   20.20.20.20:443  25.25.25.25:50915  30.30.30.30:443  tcp  1   (tmm: 5)  none

The 

cs-client-addr,cs-server-addr,ss-client-addr,ss-server-addr
are all filters to narrow your connection table. You can combine every filter to narrow your search too.

tmsh show sys connection cs-client-addr 10.10.10.10 cs-server-addr 20.20.20.20 ss-server-addr 30.30.30.30 all-properties

So if you want to see the traffic on the Child VIP, you should specify the child VIP as the filter, and here the Child VIP will be the cs-server-addr since the main VIP is the source. Haven't tested, but please try the below,

tmsh show sys connection cs-server-addr CHILD-VIP1

or even simpler would be to do a grep in the show sys connection.

tmsh show sys connection | grep CHILD-VIP1