For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

tolinrome_13817's avatar
tolinrome_13817
Icon for Nimbostratus rankNimbostratus
Jun 16, 2015

Disable mirroring on HA Pair

F5 documentation mentions that you need to disable mirroring when upgrading the software on an HA Pair. How do I do that and how do I re-enable it? Why does this need to be done? Thanks.

 

8 Replies

  • Connection mirroring is enabled per VS. You may want/need mirroring for some VS and not for others, depending on the nature of the application.

     

    F5 recommends to disable it before upgrading a pair, and re-enable it after the pair is upgraded because they make change in the mirroring communication protocol that could lead to incompatibility (when one member of the cluster has another version than others). I do not believe it happens when upgrading a pair in the same release but newer HF. But F5 recommendation is made so to have it the "safe way" (or better said, conservative).

     

  • By default, mirroring is not enabled.

     

    mirroring is configured in virtual server configuration (Advanced view --> Connection Mirroring). In most of deployments, mirroring must not been activated because :

     

    • HTTP connection are very short
    • mirroring is not supported when SSL profile (client or server) is configured

    In version before 11.0, mirroring can be configured without error Since version 11.0, mirroring cannot be configured generating an error

     

    If you upgrade a 10.x to 11.x, the upgrade will not warn you until you reboot and the configuration will not be loaded if one unsupported configuration is still enabled.

     

  • I have version 11.x and am upgrading to a newer version 11.x

     

    My mirroring is enabled in Device Management>Devices>Click on selfIP>Device Connectivity>Mirroring

     

    I do not have mirroring on any of the virtual servers.

     

  • If a standby unit will be offline for a period of time, and connection or persistence mirroring is enabled, F5 recommends that you disable session mirroring and persistence mirroring until the standby unit is back online. To disable mirroring on the active unit once the standby unit is offline, perform the following procedure:

     

    Version 11.0.0

     

    Log in to the Traffic Management Shell (tmsh) by entering the following command: tmsh

     

    Note: If you are currently logged in to the tmsh shell, you can skip this step.

     

    To verify whether session mirroring is enabled, enter the following command: list /sys db statemirror.mirrorsessions

     

    To disable session mirroring, you must modify the StateMirror.MirrorSessions db key by typing the following command: modify /sys db statemirror.mirrorsessions value disable

     

    To disable persistence mirroring from an active persistence profile, use the following syntax: modify /ltm persistence mirror disabled

     

    For example, to disable persistence mirroring from a hash persistence profile named MyHash, you would enter the following command: modify /ltm persistence hash MyHash mirror disabled

     

    Repeat Step 3 for any other configuration objects that have persistence mirroring enabled. Save the change by typing the following command: save /sys config

     

    link text

     

  • Go System-> HA-> Device Connectivity-> Network Mirroring-> Select None and update.

     

    In the same way it can enable on particular self ip.

     

  • Or you can check this out.

     

    https://support.f5.com/kb/en-us/solutions/public/17000/300/sol17391.html

     

  • Really,i haven't seen that before. I have performed a lot of upgrades and we never disable Network mirroring. Can you send me the link.