For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

MihirP1129's avatar
MihirP1129
Icon for Nimbostratus rankNimbostratus
Jun 11, 2019
Solved

Virtual Servers template?

Hello All,

 

Is there a way to create a Virtual Servers "template" with predefined settings on a Big IP F5 load balancer? We create VS almost every day for our clients and would help if we could setup a VS from a template to make our life a bit easier.

  • You can use CLI to create the VS (replace "<...>" fields with the correct value).

    tmsh create ltm virtual <VS_NAME> \
    destination <VS_IP>:443 \
    profiles add { tcp http_20 <CLIENTSSL_PROFILE> } \
    vlans replace-all-with { Internal Web } vlans-enabled \
    snatpool Prod \
    pool Webfarm_pool \
    persist replace-all-with { cookie_20 } \
    rules { httpTest_irule1 httpTest_irule2 httpTest_irule3 }

    Finally you have to save the config from running-config to startup-config.

    tmsh save sys config

    KR,

    Dario.

7 Replies

  • Thanks for that. Is there a easy way where I could take an exisiting Virtual server setup and convert into an iApp?

  • Thanks Dario for all the information and links. There is too much information and unfortunately I'm not a programmer.

     

    Could someone assist in helping me with creating a simple iApp template to deploy Virtual Servers that contains the following settings? I would greatly appreciate it.

     

    [General Properties]

     

    Name of the virtual server (**user input**)

    Type: Standard

    Source: 0.0.0.0/0

    Destination: Type HOST

             Address (**IP user input**)

    Service Port: 443 HTTPS

    Syncookie Status: Off

    State: Enabled

     

    [Configuration (BASIC) all the other options should be set to DEFAULT settings]

     

    Protocol: TCP

    HTTP Profile: http_20

    SSL Profile (Client): (**user input**)

    VLAN and Tunnel Traffic: Enabled on...

    VLAN and Tunnels : Internal

                  Web

    Source Address Translation: SNAT

    SNAT Pool: Prod

     

    [Content Rewrite]

     

    Rewrite Profile: None

    HTML Profile: None

     

    [Acceleration]

     

    Rate class: None

    OneConnect Profile: None

    NTLM Conn Pool: None

    HTTP Compression Profile: None

    Web Acceleration Profile: None

    SPDY Profile: None

     

    [Load Balancing]

     

    Default Pool: Webfarm_pool

    Default Persistence Profile: cookie_20

    Fallback Persistence Profile: None

     

    [iRules]

     

    httpTest_irule1

    httpTest_irule2

    httpTest_irule3

  • You can use CLI to create the VS (replace "<...>" fields with the correct value).

    tmsh create ltm virtual <VS_NAME> \
    destination <VS_IP>:443 \
    profiles add { tcp http_20 <CLIENTSSL_PROFILE> } \
    vlans replace-all-with { Internal Web } vlans-enabled \
    snatpool Prod \
    pool Webfarm_pool \
    persist replace-all-with { cookie_20 } \
    rules { httpTest_irule1 httpTest_irule2 httpTest_irule3 }

    Finally you have to save the config from running-config to startup-config.

    tmsh save sys config

    KR,

    Dario.