Forum Discussion

starks951_87602's avatar
starks951_87602
Icon for Nimbostratus rankNimbostratus
Dec 17, 2008

HELP - tproxy and squid in conf files

Hi folks...

 

I am quite the noob to F5, but I know my way around networking, security and operations and I am trying to import our bigip.cong and bigip_base.conf files into a piece of network modeling software to do risk analysis. The parsers I have work on most of the config, but they are puking on a few different pieces of the config and I can't find anything on the net to explain what they are.

 

 

I am seeing the following lines in a few of our bigip.conf files

 

 

bigip.conf: dest *:squid

 

bigip.conf: 10.241.17.5:squid

 

bigip.conf: 10.241.17.12:squid

 

bigip.conf: 10.241.17.13:squid

 

bigip.conf: 10.241.17.4:squid

 

bigip.conf: 10.241.17.12:squid

 

bigip.conf: 10.241.17.13:squid

 

bigip.conf: destination 10.241.16.150:squid

 

bigip.conf: destination 10.241.16.170:squid

 

 

as well as...

 

 

bigip.conf: members 10.241.17.36:tproxy

 

bigip.conf: destination 10.241.16.138:tproxy

 

 

I am assuming that this is some sort of internally f5 referenced port number or sequence of ports for SQUID proxies, but I can't find reference to what they are. And I can't find any ref to tproxy except one person on this list who seem to have been using it in code to redirect one system behind the LB back thru the LB to another system.

 

 

Could you guys explain to me what these are so I can properly tweak the parser to emulate the behaviour of these lines?

 

 

Thanks MUCH for the help...

 

 

2 Replies

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    The friendly names for the ports are listed in /etc/services. :any refers to :0. You can disable the service name resolution from the command line by running:

     

     

    b db bigpipe.displayservicenames false

     

     

    There might be a GUI option for this under System, but I'm not sure.

     

     

    Aaron
  • Ok.. thought there was something more devious than a straight /etc/services call going on here... this is why I am glad there is the Internet... people with more info than me...

     

     

    Thnx again!