Forum Discussion
Comex_17260
Feb 01, 2012Nimbostratus
how to clone/mirror traffic of a "member"
Hello folks,
I searched "clone" word to see if related subject is covered but the search functionality of the forum does not seem to be working at all.
Right, here is my problem.
I have a really huge UDP traffic with all ports which is distributed into x number of servers. For troubleshooting and testing issues, I want to clone the traffic which goes to a specific member/node.
I am aware of that there is clone pool attribute in GUI, but I do not want to clone all the traffic of the pool, because I cannot put another x number of servers as it would cost a lot of money.
Is it possible for me to clone the traffic which goes to member x.x.x.x/[all ports] of real_pool to member x.x.x.y/[all ports] of clone_pool?
Here is my code which actually did not work, but I believe it' give an idea what i am up to.
when SERVER_CONNECTED {
if { [IP::addr [IP::server_addr] equals x.x.x.x] } {
clone pool clone_Pool member x.x.x.y 0
}
pool real_Pool member x.x.x.x 0
}
Best,
-Cx
- hooleylistCirrostratusThat looks like it should work. Are you seeing any traffic sent to the x.x.x.y pool member? Can you try removing the 0 from the clone and pool commands? By default if you don't specify a port TMM should use the client's destination port to send the traffic to.
- Comex_17260NimbostratusHi Hoolio,
- Comex_17260Nimbostratushmm, although I want to duplicate some of the traffic instead of all inbound traffic; considering the below link I believe i am at the dead end, unless F5 changed something.
- nitassEmployeei guess your clone pool member is not ids/ips device.
- Comex_17260Nimbostratusno it is not Nitass, pool memebers just process data.
- nitassEmployeei guess bigip sends clone traffic but server does not pick it up since layer 3 header remains unchange.
- Comex_17260Nimbostratusmaybe it is because the header, although network is promisc, I see nothing in tcpdump.
- nitassEmployeealthough network is promisc, I see nothing in tcpdump. have you tried to capture packet on bigip?
- hooleylistCirrostratusThe clone server would need to accept packets destined for its MAC address with a destination IP of the virtual server or the production pool member for the clone pool to work.
- aydin_7552NimbostratusHi everyone
Recent Discussions
Related Content
Â
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects