For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Derek_21893's avatar
Derek_21893
Icon for Nimbostratus rankNimbostratus
Aug 06, 2009

Discovery of failover peer using iControl

Hi,     I'd like to be able to discover a failover peer for an active-active or active-standby pair of LTMs using iControl. From what I can tell there is no good way to do this currently. ...
dev
devops
iControl
samstep's avatar
samstep
Icon for Cirrocumulus rankCirrocumulus
Aug 07, 2009
HA pair boxes are typicaly configured for failover using a private VLAN shared only between that pair. By asking one box about its peer address you will only get that private (and in your case non-routable) self IP.

 

In your iControl application you can first query ALL your BIG-IP boxes using their routable *management IP* addresses for their floating Self-IPs using Networking.SelfIP.get_list and Networking.SelfIP.get_floating_state iControl calls and store all the Self IPs in your application in some sort of a structure/array for comparison purposes.

 

 

You will then need to do a FloatingIP comparison/matching in your application code to figure out which boxes are HA peers.

 

 

Do not use the VIP comparison method - as you have spotted yourself it is highly unreliable.