ABOUT DEVCENTRAL

DevCentral News Technical Forum Technical Articles Technical CrowdSRC Community Guidelines DevCentral EULA Get a Developer Lab License Become a DevCentral MVP

RESOURCES

Product Documentation White Papers Glossary Customer Stories Webinars Free Online Courses F5 Certification LearnF5 Training

SUPPORT

Manage Subscriptions Professional Services Professional Services Create a Service Request Software Downloads Support Portal

PARTNERS

Find a Reseller Partner Technology Alliances Become an F5 Partner Login to Partner Central

---

©2024 F5, Inc. All rights reserved.

Problem this snippet solves:

Credits: Fork from https://devcentral.f5.com/codeshare?sid=310

The outlined script will detach an iRule from one or more virtual servers. I've added code to the original script, to allow the removal from one or more virtual servers across multiple partitions.

This script would search through the virtual server configuration of every partition and then detach the specified iRule from any virtual servers. The iRule itself would not become deleted from the system.

Cheers, Kai

How to use this snippet:

Script Output

[itacs@f5-02:Active:Standalone] tmp # tmsh run cli script file script.tcl /Common/iRule_2_Delete\nCrawling Partition: /Common\n        Crawling VS : /Common/Default_Forward\n        Finished VS: No Rules bound to the VS\n        Crawling VS : /Common/VS_DNS_210\n        Finished VS: No Rules bound to the VS\n        Crawling VS : /Common/VS_HTTPS_210\n        Finished VS: iRule_2_Delete is not bound to VS\n        Crawling VS : /Common/VS_HTTPS_211\n        Finished VS: No Rules bound to the VS\n        Crawling VS : /Common/VS_HTTP_210\n        Finished VS: iRule_2_Delete is getting removed from VS\n        Crawling VS : /Common/VS_HTTP_211\n        Finished VS: iRule_2_Delete is getting removed from VS\n        Crawling VS : /Common/VS_LDAPS_636\n        Finished VS: iRule_2_Delete is not bound to VS\n        Crawling VS : /Common/VS_LDAP_389\n        Finished VS: iRule_2_Delete is not bound to VS\n        Crawling VS : /Common/VS_RDP_211\n        Finished VS: iRule_2_Delete is not bound to VS\nFinished Partition: /Common\nCrawling Partition: /Other1\n        Crawling VS : /Other1/VS_HTTP_111\n        Finished VS: /Common/iRule_2_Delete is getting removed from VS\nFinished Partition: /Other1\nCrawling Partition: /Other2\n        Crawling VS : /Other2/VS_HTTP_151\n        Finished VS: No Rules bound to the VS\nFinished Partition: /Other2\nThe provided iRule /Common/iRule_2_Delete was removed from the following virtuals:\n        /Common/VS_HTTP_210\n        /Common/VS_HTTP_211\n        /Other1/VS_HTTP_111\n[itacs@f5-02:Active:Standalone] tmp # \n

Code :

proc script::run {} {\n    if { $tmsh::argc != 2 } then {\n        puts \"A single rule name must be provided\"\n        exit\n    }\n    set qualified_rulename [lindex $tmsh::argv 1]\n    set vips_in_play \"\"\n    foreach partition [tmsh::get_config auth partition] {\n        set partition \"/[tmsh::get_name $partition]\"\n        puts \"Crawling Partition: $partition\"\n        tmsh::cd $partition\n        if { $qualified_rulename starts_with $partition } then {\n            set rulename [string range $qualified_rulename [expr { [string last \"/\" $qualified_rulename] + 1 } ] end]\n        } else {\n            set rulename $qualified_rulename\n        }\n        set vips [tmsh::get_config /ltm virtual]\n        tmsh::begin_transaction \n        foreach vip $vips {\n            puts \"\\tCrawling VS : $partition/[tmsh::get_name $vip]\"\n            if { [tmsh::get_field_value $vip \"rules\" rules] == 0 } then {\n                puts \"\\tFinished VS: No Rules bound to the VS\"\n                continue\n            }\n            if { [lsearch -exact $rules $rulename] == -1 } then {\n                puts \"\\tFinished VS: $rulename is not bound to VS\"\n                continue\n            }\n            if { [llength $rules] < 2 } then {\n            puts \"\\tFinished VS: $rulename is getting removed from VS\"\n            tmsh::modify /ltm virtual [tmsh::get_name $vip] rules none\n            } else {\n            puts \"\\tFinished VS: $rulename is getting removed from VS\"\n                set id [lsearch -exact $rules $rulename]\n                set keepers [lreplace $rules $id $id]\n                tmsh::modify /ltm virtual [tmsh::get_name $vip] rules \"{ $keepers }\"\n            }\n            lappend vips_in_play \"$partition/[tmsh::get_name $vip]\"\n        }\n        tmsh::commit_transaction\n        puts \"Finished Partition: $partition\"\n    }\n    if { $vips_in_play ne \"\" } then {\n        puts \"The iRule $rulename was removed from the following virtuals:\"\n        foreach vip_in_play $vips_in_play {\n            puts \"\\t$vip_in_play\"\n        }\n    } else {\n        puts \"The iRule $rulename was not found on any virtual.\"\n    }\n}

Tested this on version:

Problem this snippet solves:

Credits: Fork from https://devcentral.f5.com/codeshare?sid=310

The outlined script will detach an iRule from one or more virtual servers. I've added code to the original script, to allow the removal from one or more virtual servers across multiple partitions.

This script would search through the virtual server configuration of every partition and then detach the specified iRule from any virtual servers. The iRule itself would not become deleted from the system.

Cheers, Kai

How to use this snippet:

Script Output

[itacs@f5-02:Active:Standalone] tmp # tmsh run cli script file script.tcl /Common/iRule_2_Delete\nCrawling Partition: /Common\n        Crawling VS : /Common/Default_Forward\n        Finished VS: No Rules bound to the VS\n        Crawling VS : /Common/VS_DNS_210\n        Finished VS: No Rules bound to the VS\n        Crawling VS : /Common/VS_HTTPS_210\n        Finished VS: iRule_2_Delete is not bound to VS\n        Crawling VS : /Common/VS_HTTPS_211\n        Finished VS: No Rules bound to the VS\n        Crawling VS : /Common/VS_HTTP_210\n        Finished VS: iRule_2_Delete is getting removed from VS\n        Crawling VS : /Common/VS_HTTP_211\n        Finished VS: iRule_2_Delete is getting removed from VS\n        Crawling VS : /Common/VS_LDAPS_636\n        Finished VS: iRule_2_Delete is not bound to VS\n        Crawling VS : /Common/VS_LDAP_389\n        Finished VS: iRule_2_Delete is not bound to VS\n        Crawling VS : /Common/VS_RDP_211\n        Finished VS: iRule_2_Delete is not bound to VS\nFinished Partition: /Common\nCrawling Partition: /Other1\n        Crawling VS : /Other1/VS_HTTP_111\n        Finished VS: /Common/iRule_2_Delete is getting removed from VS\nFinished Partition: /Other1\nCrawling Partition: /Other2\n        Crawling VS : /Other2/VS_HTTP_151\n        Finished VS: No Rules bound to the VS\nFinished Partition: /Other2\nThe provided iRule /Common/iRule_2_Delete was removed from the following virtuals:\n        /Common/VS_HTTP_210\n        /Common/VS_HTTP_211\n        /Other1/VS_HTTP_111\n[itacs@f5-02:Active:Standalone] tmp # \n

Code :

proc script::run {} {\n    if { $tmsh::argc != 2 } then {\n        puts \"A single rule name must be provided\"\n        exit\n    }\n    set qualified_rulename [lindex $tmsh::argv 1]\n    set vips_in_play \"\"\n    foreach partition [tmsh::get_config auth partition] {\n        set partition \"/[tmsh::get_name $partition]\"\n        puts \"Crawling Partition: $partition\"\n        tmsh::cd $partition\n        if { $qualified_rulename starts_with $partition } then {\n            set rulename [string range $qualified_rulename [expr { [string last \"/\" $qualified_rulename] + 1 } ] end]\n        } else {\n            set rulename $qualified_rulename\n        }\n        set vips [tmsh::get_config /ltm virtual]\n        tmsh::begin_transaction \n        foreach vip $vips {\n            puts \"\\tCrawling VS : $partition/[tmsh::get_name $vip]\"\n            if { [tmsh::get_field_value $vip \"rules\" rules] == 0 } then {\n                puts \"\\tFinished VS: No Rules bound to the VS\"\n                continue\n            }\n            if { [lsearch -exact $rules $rulename] == -1 } then {\n                puts \"\\tFinished VS: $rulename is not bound to VS\"\n                continue\n            }\n            if { [llength $rules] < 2 } then {\n            puts \"\\tFinished VS: $rulename is getting removed from VS\"\n            tmsh::modify /ltm virtual [tmsh::get_name $vip] rules none\n            } else {\n            puts \"\\tFinished VS: $rulename is getting removed from VS\"\n                set id [lsearch -exact $rules $rulename]\n                set keepers [lreplace $rules $id $id]\n                tmsh::modify /ltm virtual [tmsh::get_name $vip] rules \"{ $keepers }\"\n            }\n            lappend vips_in_play \"$partition/[tmsh::get_name $vip]\"\n        }\n        tmsh::commit_transaction\n        puts \"Finished Partition: $partition\"\n    }\n    if { $vips_in_play ne \"\" } then {\n        puts \"The iRule $rulename was removed from the following virtuals:\"\n        foreach vip_in_play $vips_in_play {\n            puts \"\\t$vip_in_play\"\n        }\n    } else {\n        puts \"The iRule $rulename was not found on any virtual.\"\n    }\n}

Tested this on version:

Kal, Nice work! Any suggestions how I might leverage this or something similar to remove a particular iRule from a list? I have a UAT & Prod change so I have to segment out the removal. The gear I'd run this on has both so I need to be selective hence wanting to run it through a list. Again nice work!

Regards,

/jeff

Hello, thanks for the script

Adapted it to contain also eventual keywords, in order to delete the specified iRule from Virtual Servers which have a specific naming convention (e.g. application.test.bank.com). Just contains one more IF-THEN clause:

proc script::run {} {\n    if { $tmsh::argc != 2 } then {\n        puts \"A single rule name must be provided\"\n        exit\n    }\n    set qualified_rulename [lindex $tmsh::argv 1]\n    set vips_in_play \"\"\n    foreach partition [tmsh::get_config auth partition] {\n        set partition \"/[tmsh::get_name $partition]\"\n        puts \"Crawling Partition: $partition\"\n        tmsh::cd $partition\n        if { $qualified_rulename starts_with $partition } then {\n            set rulename [string range $qualified_rulename [expr { [string last \"/\" $qualified_rulename] + 1 } ] end]\n        } else {\n            set rulename $qualified_rulename\n        }\n        set vips [tmsh::get_config /ltm virtual]\n        tmsh::begin_transaction \n        foreach vip $vips {\n\t\tif { $vip contains \"KEYWORD\" } then {\n            puts \"\\tCrawling VS : $partition/[tmsh::get_name $vip]\"\n            if { [tmsh::get_field_value $vip \"rules\" rules] == 0 } then {\n                puts \"\\tFinished VS: No Rules bound to the VS\"\n                continue\n            }\n            if { [lsearch -exact $rules $rulename] == -1 } then {\n                puts \"\\tFinished VS: $rulename is not bound to VS\"\n                continue\n            }\n            if { [llength $rules] < 2 } then {\n            puts \"\\tFinished VS: $rulename is getting removed from VS\"\n            tmsh::modify /ltm virtual [tmsh::get_name $vip] rules none\n            } else {\n            puts \"\\tFinished VS: $rulename is getting removed from VS\"\n                set id [lsearch -exact $rules $rulename]\n                set keepers [lreplace $rules $id $id]\n                tmsh::modify /ltm virtual [tmsh::get_name $vip] rules \"{ $keepers }\"\n            }\n            lappend vips_in_play \"$partition/[tmsh::get_name $vip]\"\n        }\n\t\t}\n        tmsh::commit_transaction\n        puts \"Finished Partition: $partition\"\n    }\n    if { $vips_in_play ne \"\" } then {\n        puts \"The iRule $rulename was removed from the following virtuals:\"\n        foreach vip_in_play $vips_in_play {\n            puts \"\\t$vip_in_play\"\n        }\n    } else {\n        puts \"The iRule $rulename was not found on any virtual.\"\n    }\n}

Regards