Forum Discussion

flomkrl_29950's avatar
flomkrl_29950
Icon for Nimbostratus rankNimbostratus
Mar 13, 2008

MOCS SIP over SSL monitor

Hello;

 

 

I work actually on Microsoft Office Communicator load balancing project. For that, i need to monitor sip over ssl. For the moment i use a simple https monitor on the 5061 port, this is not a good monitor for that.

 

 

Is there any tools on the F5 to check correctly SIP over SSL ?

 

 

Thanks in advance,

 

 

Regards,

 

 

Flo,
config
design
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Mar 13, 2008
    Hi,

     

     

    As there isn't a default monitor that allows you to make generic non-HTTPS SSL requests, I think you'd need to create an external monitor which references a script. You could use bash and openssl's c_client (Click here) or perhaps a perl script to do this. You can check the Monitoring Codeshare (Click here) for example external monitors.

     

     

    Aaron
  • flomkrl_29950's avatar
    flomkrl_29950
    Icon for Nimbostratus rankNimbostratus
    Apr 01, 2008
    Thanks,

     

     

    For info there is a sample script which permit to send data by ssl : http://devcentral.f5.com/SDK/sslvpn.public.pl.txt

     

     

    here is the script i use now,

     

     

    Regards,

     

     

    Flo,

     

     

    NODE=`echo ${1} | sed 's/::ffff://'`

     

    PORT=${2}

     

    PIDFILE="/var/run/`basename ${0}`.${NODE}_${PORT}.pid"

     

    kill of the last instance of this monitor if hung and log current pid

     

    if [ -f $PIDFILE ]

     

    then

     

    kill -9 `cat $PIDFILE` > /dev/null 2>&1

     

    fi

     

    echo "$$" > $PIDFILE

     

     

    echo "" | /usr/bin/openssl s_client -host $NODE -port $PORT > /dev/null 2>&1

     

     

    mark node UP if expected response was received

     

    if [ $? -eq 0 ]

     

    then

     

    echo "UP"

     

    fi

     

     

    rm -f $PIDFILE

     

    exit