For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JoergK's avatar
JoergK
Icon for Nimbostratus rankNimbostratus
Aug 22, 2019
Solved

tmsh or bash command to kill all access policy sessions in apm module

Hi, we are running two Big IP 5250 with APM module. Sometimes we need to kill all APM sessions. Today we do that by going to Access Policy -> Manage Sessions, select the existing sessions and kill...
BIG-IP
BIG-IP Access Policy Manager (APM)
devops
  • Niels_van_Sluis's avatar
    Niels_van_Sluis
    Aug 22, 2019

    Yes, like this:

    [root@big-ip:Active:Standalone] config # /usr/bin/sessiondump --delete all
Succesfully deleted 2 sessions
[root@bigip:Active:Standalone] config #
JoergK's avatar
JoergK
Icon for Nimbostratus rankNimbostratus
Sep 11, 2019

Hi,

At first I would like to thank you Dave for sharing the manual page. It is not much but better than nothing.

I have used the following command in version 12.1.3.7 some times and it worked as expected. All sessions were killed.

/usr/bin/sessiondump --delete all

Yesterday I used it the first time in version 14.1.0.6 and got to following output:

user@bi5050:Active:In Sync] ~ # /usr/bin/sessiondump --delete all 
Couldn't delete session master key
Succesfully deleted 4803 sessions
Failures on 1 sessions
user@bi5050:Active:In Sync] ~ #

What is the session master key? Could anybody explain it, please?

  • Dave_W's avatar
    Dave_W
    Icon for Employee rankEmployee
    Sep 11, 2019

    Hello JoergK, I believe that sometimes sessions can get in a "stuck" state and this might explain the error. Also this could perhaps be related to HA sync timing. Of course I am speculating here.