For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Macaron's avatar
Macaron
Icon for Nimbostratus rankNimbostratus
Oct 09, 2020
Solved

Script to find virtual servers with connection mirroring enabled

Hi All, I am working on to turn off connection mirroring on all the legacy VIPs which are causing application performance degradation. Is there a way to automate and discover virtual serv...
application delivery
BIG-IP
LTM
security
  • Dario_Garrido's avatar
    Dario_Garrido
    Oct 16, 2020

    Hello Macaron.

    You need to perform bash engineering. Some examples:

    tmsh list ltm virtual mirror | grep -B1 enabled
tmsh list ltm virtual mirror | grep -B1 enabled | grep ltm | awk '{print $3}'
tmsh list ltm virtual one-line all-properties | grep "mirror enabled" | awk '{print $3}'
tmsh -q -c "cd / ; list ltm recursive one-line all-properties" | grep "mirror enabled" | awk '{print $3}'
# This last one to capture VS located in different partitions.

    Regarding the 1000 records, you should not have any problem, but it's better to execute it when CPU/RAM consumption in management plane is low.

    Regards,

    Dario.

Macaron's avatar
Macaron
Icon for Nimbostratus rankNimbostratus
Oct 12, 2020

The first command returned 1200 plus connection records for 37 VIPs in total on F5. I need to identify VIPs which has connection mirroring enabled. Is there any command for that?

Macaron's avatar
Macaron
Icon for Nimbostratus rankNimbostratus
Oct 16, 2020

Dairo,

  1. Thanks for the reply. when I used this command tmsh list ltm virtual mirror on an F5 with less number of VIP but the other f5 where i have almost 1000 VIPs it is asking me "are you sure you want to display 1000 records (y/n)" My question is if i say will it impact any application or slow down the application during the processing of such large number of VIPs? Also is there a way to filter VIPs where connection mirroring enabled? as this command show both enable and disabled connection mirroring on VIPs.
  2.