For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Charlysan's avatar
Charlysan
Icon for Nimbostratus rankNimbostratus
Nov 29, 2022
Solved

Where icall script are stored in f5 big-ip?

Hi, I need to know where this type of script (icall script)  are stored, and if them can be backed up like a normal file.

 

Thanks in advance

Cheers

devops
security
  • Kai_Wilke's avatar
    Kai_Wilke
    Nov 29, 2022

    Hi Charlysan,

    the iCall Handlers (stored in bigip.conf) and iCall Scripts (stored in bigip_script.conf) are included in a regular backup. 

     

     

    itacs@(kw-f5-dev)(cfg-sync Standalone)(Active)(/Common)(tmos)# list sys icall
sys icall handler periodic F5.AutoSaveConfigScheduledTask {
interval 120
script F5.SaveConfig.OnlyIfModified
}
sys icall script F5.SaveConfig.OnlyIfModified {
app-service none
definition {
set dbfile_timestamp [exec stat /config/BigDB.dat --format %Z]
set conffile_timestamp [exec stat /config/bigip.conf --format %Z]
if { $dbfile_timestamp > $conffile_timestamp } {
tmsh::save sys config partitions all
}
}
description none
events none
}
itacs@(kw-f5-dev)(cfg-sync Standalone)(Active)(/Common)(tmos)#

     

     

    If your iCall Scripts execute external BASH scripts, its strongly recommended to store those BASH scripts in directories covered by UCS backups (e.g. /config or /var folder).

    Cheers, Kai

2 Replies

  • CA_Valli's avatar
    CA_Valli
    Icon for MVP rankMVP
    Nov 29, 2022

    They should be in your bigip_script.conf file, which will always be exported when taking qkview or ucs dumps. 

     

  • Kai_Wilke's avatar
    Kai_Wilke
    Icon for MVP rankMVP
    Nov 29, 2022

    Hi Charlysan,

    the iCall Handlers (stored in bigip.conf) and iCall Scripts (stored in bigip_script.conf) are included in a regular backup. 

     

     

    itacs@(kw-f5-dev)(cfg-sync Standalone)(Active)(/Common)(tmos)# list sys icall
sys icall handler periodic F5.AutoSaveConfigScheduledTask {
interval 120
script F5.SaveConfig.OnlyIfModified
}
sys icall script F5.SaveConfig.OnlyIfModified {
app-service none
definition {
set dbfile_timestamp [exec stat /config/BigDB.dat --format %Z]
set conffile_timestamp [exec stat /config/bigip.conf --format %Z]
if { $dbfile_timestamp > $conffile_timestamp } {
tmsh::save sys config partitions all
}
}
description none
events none
}
itacs@(kw-f5-dev)(cfg-sync Standalone)(Active)(/Common)(tmos)#

     

     

    If your iCall Scripts execute external BASH scripts, its strongly recommended to store those BASH scripts in directories covered by UCS backups (e.g. /config or /var folder).

    Cheers, Kai