For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Michael_J__Whee's avatar
Michael_J__Whee
Icon for Nimbostratus rankNimbostratus
Aug 23, 2010

Is 'bigpipe load' service interrupting?

I'm running into the issue where a renewed certificate is not "taking effect". I have tried going to the individual profiles and clicking "update", but that doesn't seem to be fixing it. So, my next option appears to be to run 'bigpipe load' from the CLI.

 

 

Is this a service impacting command? Will the device stay up and running while it re-loads the configuration?

 

config
design

2 Replies

  • Haarith_Devaraj's avatar
    Haarith_Devaraj
    Icon for Nimbostratus rankNimbostratus
    Aug 23, 2010
    It should be a transparent command. But it really depends on your config/hardware/software version.

     

     

    Say you have a lot of vips/irules etc which takes the machine some time to load , then you could trip the failover monitors.

     

     

    We have had issues where certain large F5 configs within specific datacenter takes a hit while others dont.

     

     

    It also dpeends on what software revision you are running. We have seen it have greater impact on the 9.2.x and less on the 9.4.x series.

     

     

    If you are running 9.3.1 -> http://support.f5.com/kb/en-us/solutions/public/9000/000/sol9049.html?sr=9623477

     

     

  • Haarith_Devaraj's avatar
    Haarith_Devaraj
    Icon for Nimbostratus rankNimbostratus
    Aug 23, 2010
    For your certificates, are you using intermediate-ca (Trusted Cerificate authority)..in which case, remember to update your SSL with this..

     

     

    eg: go to profiles -> ssl -> client

     

     

    Choose certificate: www.test.com

     

     

    Choose advanced

     

     

    then choose the TCA ( trusted certificate authority )

     

     

    HTH