For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

aries22's avatar
aries22
Icon for Altocumulus rankAltocumulus
Sep 13, 2019

Is rebooting to a new software installed on a partition the same as running touch /service/mcpd/forceload and reboot?

Hi, everyone!   Would like to know if the procedure -rebooting to a new software installed on a partition, loads the configuration from the text configuration file instead of the binary file? In ...
application delivery
BIG-IP
aries22's avatar
aries22
Icon for Altocumulus rankAltocumulus
Sep 13, 2019

Hi  , thank you for the quick response and for the explanation!

 

The reason I'm asking is, we had an issue where priority group activation is not working as expected and F5 Support suggested to do a forceload.

 

Now, we'll also be having an upgrade of the devices so I was thinking if doing a forceload is still necessary after the upgrade or not.

  • jaikumar_f5's avatar
    jaikumar_f5
    Icon for Noctilucent rankNoctilucent
    Sep 13, 2019

    May we know what went wrong with your PG setting. How many high PG went down and what you expected and it didn't happen !!!

    Can you mask the pool members and share your pool details.

    ​

    #tmsh list ltm pool <pool-name>​

    ​

    Also share your existing version,

    ​

    #cat /VERSION

    ​

    ​Also what is the version F5 support engineer recommended to upgrade to.

    • aries22's avatar
      aries22
      Icon for Altocumulus rankAltocumulus
      Sep 14, 2019

      Well, even though priority group is set and pool member 1 should be the only one receiving traffic, packet capture shows that connections are still load balanced to the two pool members.

      Existing version is 12.1.3.7. We're upgrading to v14.1.0.6 but the recommendation to upgrade did not come from F5 support to fix the PG issue. We're gonna uograde to fix vulnerabilities and customer wanted to minimize downtime so they asked us if we're going to perform the mcpd forceload right after bootup to new version.

      Below is the current configuration where we disabled TAPP2P:23101 to avoid having connections sent to it,

      ltm pool /Common/T_23101_pool {
 
  load-balancing-mode least-connections-node
 
  members {
 
    /Common/TAPP1P:23101 {
 
      address X.X.X.A%2
 
      priority-group 10
 
    }
 
    /Common/TAPP2P:23101 {
 
      address X.X.X.B%2
 
      priority-group 5
 
      session user-disabled
 
      state user-down
 
    }
 
  }
 
  min-active-members 1
 
  monitor /Common/TCP23101 
 
  service-down-action reset
 
}
    • jaikumar_f5's avatar
      jaikumar_f5
      Icon for Noctilucent rankNoctilucent
      Sep 23, 2019

      Were you able to make the below change and see its results ?