SFTP Monitoring

Hi,

 

 

If a TCP port check is causing an error, You could create a script which calls sftp on the BIG-IP to connect to the pool members and verify they answer correctly. Once you have a script which can run on the BIG-IP, you can reference that in an external monitor. You can check the Monitoring codeshare section for examples of external monitors.

 

 

Aaron

Hi - Did you ever find an external monitor in the codeshare section to perform an actual sftp login ?

If you don't get an answer on this, you could use the Net::sftp perl library (assuming it's available on LTM) to do this via a script:

 

 

http://search.cpan.org/~drolsky/Net-SFTP-0.08/lib/Net/SFTP.pm

 

 

The DHCP monitor in the Codeshare from Kirk Bauer is Perl based, so it should be fairly simple to adapt for SFTP.

 

 

http://devcentral.f5.com/wiki/default.aspx/AdvDesignConfig/DHCPMonitor.html

 

 

Aaron

You can also consider using public/private key authentication and run sftp command in a monitor.

 

 

As what Aaron has mentioned, you would need additional module (eg. Net:SFTP for perl, etc) to pass the password to sftp. I personally wouldn't recommend this one because when you upgrade the box you'll need to remember to install the module as well.

Use an external monitor and perform a

 

 

CHECKDATE=`ssh -n @ date`

 

 

with a public/private keypair... The -n parameter is in there in case something happens to the public key the server gives back... You need to do this by hand BTW before the automated check will work.

 

 

Then just check that the $CHECKDATE environment variable is sane... If it is, then sshd is up & running on the target server...

 

 

Changing the command to use NODE_IP and NODE_PORT (And any logging etc you'd like on it) is left as an exercise for the reader. You don't have to do this as a shell script BTW... It could be perl or whatever.

 

 

 

H

Hello,

 

 

could you please post your entire script ?

 

 

many Thanks

 

 

David

 

Hi David,

 

 

You could use Hamish's suggestion for the SCP command and put it in this monitor template:

 

 

http://devcentral.f5.com/wiki/default.aspx/AdvDesignConfig/TemplateForExternalLtmMonitors.html

 

 

Aaron