For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

anujl_5566's avatar
anujl_5566
Icon for Nimbostratus rankNimbostratus
Oct 16, 2015

Periodic Config Sync

Hi Guys,   I searched devcentral before deciding to start new thread. We are on version 11.4.1 and have multiple config sync failover clusters in prod and pre prod environments.   In pre 'devo...
application delivery
devops
LTM
management
TMSH
gbam_190768's avatar
gbam_190768
Icon for Cirrus rankCirrus
Oct 22, 2015

It would depend on what your change management policy is? Who is changing your environment? Are they always changing the active box? If someone is testing out new monitors on a standby box and just wanting to evaluate how they do over a period of then and you sync over it, they won't be happy.

 

What happens if someone added a VLAN to a box and didn't add it to all of the boxes, now your config sync will fail. Sames goes for a new floating self IP without a non floating on that VLAN. I think it'd be more useful to generate a "notification" of changes on each box, a diff of the configs and say do you approve these changes. Click yes, then it syncs the config.

 

At that point you'll have spent a week writing a script to save 10 minutes of config sync work which should be covered in any changes that are made (IE if you change a VIP, you test it, why would you not sync the config?).

 

TLDR: I don't think it's worth the time it'd take and there are a lot more necessary devops scripts or documentation work that'd be more helpful.