For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Clayton's avatar
Clayton
Icon for Altocumulus rankAltocumulus
Jun 08, 2021

MySQL Monitor (or EAV) with SSL?

We are migrating to MySQL, and I would like to use our F5 LTM to load balancer the ( MySql Enterprsie, 3-node) cluster. I have upgraded to Bigip 15.1.3 (from 14.x.x) per Support as version 15 should ...
application delivery
BIG-IP
LTM
mysql
ssl
Clayton's avatar
Clayton
Icon for Altocumulus rankAltocumulus
Jun 09, 2021

Ok, well.. The monitor using the Virtual as an alias doesn't work if the pool is down. If I add a simple ICMP monitor, and tell the pool to be up if at least 1 monitor succeeds, then the Virtual Server works. Problem is, it negates my use of the pool.

 

Only one of the mysql servers (3-node Enterprise cluster) will have the Master (read/write) role. I need one pool for read/write, and another for just the read-only nodes.

 

And manually updating the pools to enable/disable nodes is kind not what I want :)

 

SO - I will try using an external script, since I am able to use /bin/mysql to connect on the F5 CLI.

  • Nikoolayy1's avatar
    Nikoolayy1
    Icon for MVP rankMVP
    Jun 09, 2021

    Check iApp MySQL-PROXY if it helps as it can select the pool with the server that does the writting:

     

     

    https://clouddocs.f5.com/api/irules/MySQL-Proxy.html

     

     

     

    Also don't forget that you can attach monitors under specific pool members not only under the pool, so you can create 3 VIP servers with just one pool member server that the 3 monitors under the main pool but each attached to different pool member will use for TLS/SSL compatibility.

     

     

     

    Other than that the External EAV monitors are the option.