For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

sundogbrew's avatar
sundogbrew
Icon for Altocumulus rankAltocumulus
Apr 24, 2014

Question about TMSH and high CPU...

So I posted a question about a TMSH script to change SSL certs a week or so ago. I got it to work and it is really cool. My question stems from this, I ran it a few times on my standby unit and it really put a hurting on the CPU. Way up around 80 - 90% I am afraid that my primary is more busy and that might crush it. My first question is if I run it on the standby and then fail over and then sync, am I avoiding that hit? Or will it just be caused by the sync since there are so many changes? My second question is at what point does the CPU start to cause problems for traffic? Thanks Joe

 

3 Replies

  • I ran it a few times on my standby unit and it really put a hurting on the CPU. Way up around 80 - 90%

     

    where did you see it? was it system cpu usage in performance graph?

     

    can you post the script here?

     

  • I was looking at the dashboard when running it, it took between 2 & 3 minutes. Here is the script

     tmsh list ltm virtual one-line|grep old-clientssl|cut -d' ' -f3| xargs -I_ -n1 tmsh modify ltm virtual _ profiles delete { old-clientssl } profiles add { new-clientssl }
    
  • i do not think configsync will create cpu spike. so, i think making change on standby unit, failover and configsync (to original active unit) should be okay.

     

    just my 2 cents.