BigIP Report Old
Problem this snippet solves:
This codeshare has been deprecated due to a hosting platform corruption. I have moved code and conversation to a new record (on the same original URL) https://devcentral.f5.com/s/articles/bigip-report
can be Overview
This is a script which will generate a report of the BigIP LTM configuration on all your load balancers making it easy to find information and get a comprehensive overview of virtual servers and pools connected to them.
This information is used to relay information to our NOC and developers to give them insight in where things are located and to be able to plan patching and deploys. I also use it myself as a quick way get information or gather data used as a foundation for RFC's, ie get a list of all external virtual servers without compression profiles.
The script has been running on 13 pairs of load balancers, indexing over 1200 virtual servers for several years now and the report is widely used across the company and by many companies and governments across the world.
It's easy to setup and use and only requires guest permissions on your devices.
Demo/Preview
Please note that it takes time to make these so sometimes they're a bit outdated and they only cover one HA pair. However, they still serve the purpose of showing what you can expect from the report.
Interactive demo
http://loadbalancing.se/bigipreportdemo/
Screen shots
The main report:
The device overview:
Certificate details:
How to use this snippet:
This codeshare has been deprecated due to a hosting platform corruption. I have moved code and conversation to a new record (on the same original URL) https://devcentral.f5.com/s/articles/bigip-report
Installation instructions
BigipReport REST
This is the only branch we're updating since middle of 2020 and it supports 12.x and upwards (maybe even 11.6).
Download: https://loadbalancing.se/downloads/bigipreport-v5.5.4.zip
Documentation, installation instructions and troubleshooting: https://loadbalancing.se/bigipreport-rest/
Docker support
This will be the recommended way of running bigipreport in the near future. It's still undergoing testing but it's looking really good so far.
https://loadbalancing.se/2021/01/05/running-bigipreport-on-docker/
BigipReport (Legacy)
Older version of the report that only runs on Windows and is depending on a Powershell plugin originally written by Joe Pruitt (F5).
BigipReport (Stable):
https://loadbalancing.se/downloads/bigipreport-5.3.1.zip
BigipReport (BETA): https://loadbalancing.se/downloads/bigipreport-5.4.0-beta.zip
iControl Snapin: https://loadbalancing.se/downloads/f5-icontrol.zip
Documentation and installation instructions:
https://loadbalancing.se/bigip-report/
Upgrade instructions
Protect the report using APM and active directory
Written by DevCentral member Shann_P:
https://loadbalancing.se/2018/04/08/protecting-bigip-report-behind-an-apm-by-shannon-poole/
Got issues/problems/feedback?
Still have issues? Drop a comment below. We usually reply quite fast. Any bugs found, issues detected or ideas contributed makes the report better for everyone, so it's always appreciated.
---
Also trying out a Discord channel now. You're welcome to hang out with us there:
Code :
85931,86647,90730
Tested this on version:
13.0
974 Comments
Nadj, thank you but I don't think it's viable for me to update the CVEs manually. It would take too long. Would be another think if I had people pay for it but I would rather avoid that.
Tom, are you talking about a white list? Then you could specify a specific list of items available to users. Since this is a client side application there's not much more I can do.
Where are you working anyway, sounds like the DoD. :)
Also wanted to add that I contracted the bird flu and currently fighting to get better. Might take longer than usual for me to respond.
/Patrik
Tom, another option could be to specify partitions that the report should generate the report from.
/Patrik
- nadj_354479
Nimbostratus
Hi,
Is there a possibility that you add a search fingernail (search by system version per module) ?
nadj,
- JustCooLpOOLe
Cirrocumulus
Hi Patrik,
Is it possible to hide the "Console" tab? For some individuals, I would prefer that they not see our serial numbers. Just curious if that's possible. Love the report!
- TimRiker
Cirrocumulus
Testing bigipreport-5.0.6.ps1
line 2245 should have a title attribute which is required
line 2245 I would recommend an encoding line like: meta http-equiv="Content-Type" content="text/html; charset=utf-8"
line 2246 and following have type="text/javascript" language="javascript" which are no longer required
line 2317 ends with ;> where the ; should be removed
line 2358 sets up $i where that should really happen above the ForEach and I'd suggest a different name, see below for line 2419
line 2374 has NOWRAP which is no longer supported
line 2419 reuses $i causing progress counter to mess up and duplicate document ids. I replaced with $asm
page is crashing for me on large f5 configuration. pace and beforedocumentready sections never hide themselves. hiding in chrome dev tools finds the rest of the page seems to work.
- Nadj
This script is confirmed to be working with v11.6.
Regarding your comment "Is there a possibility that you add a search fingernail (search by system version per module)?". I have something planned for the future that might support this, but currently it's not.
Shann_PI did anticipate this request, and I'm surprised to see that it took so long for someone to ask for it. Since BigIPReport is an 100% client-side application I can't show it for some users and not show it for others.
What I could do is to add an option in the configuration which instead of serial number would add x.x.x.x.
May I ask what are you afraid of in regards to the serial numbers? I had the same thought when writing the functionality but could not think of a scenario where it could be harmful.
Tim RikerWoah, exposing my dirty code in public like that. You make me feel ashamed. ;)
Jokes aside, where did you get these recommendations? You say the page crashes on you on a large F5 configuration, but does this mean you have tested it successfully on a smaller config? Inital guess would be that there's something "funky" going on with the JSON files. Do they load successfully in the network tab and can chrome/firefox read their content, or is it garbled (think Chinese characters)?
- nadj_354479
Nimbostratus
how to add in the report the modules installed on the big IP?
NADJ
- JustCooLpOOLe
Cirrocumulus
Hi Patrik,
My thought was to have two reports. One for our team and one for the support teams of our customers who are not part of our team. I would just create the report twice and having the ability to hide the "Console" button would be a simple solution if it's possible.
- Nadj
I don't understand what you mean. Sorry.
ShannWould serial number obfuscation work fine? Or do you want to remove the console altogether?
- JustCooLpOOLe
Cirrocumulus
Hi Patrik,
My preference would be the ability to hide it via the config file. I like it, just would prefer to hide it from my users.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)