cancel
Showing results for 
Search instead for 
Did you mean: 
Login & Join the DevCentral Connects Group to watch the Recorded LiveStream (May 12) on Basic iControl Security - show notes included.

Script to find virtual servers with connection mirroring enabled

Macaron
Altostratus
Altostratus

Hi All,

I am working on to turn off connection mirroring on all the legacy VIPs which are causing application performance degradation. Is there a way to automate and discover virtual server with connection mirroring enabled via script? and also disable automatically?

 

Thanks

1 ACCEPTED SOLUTION

Hello Macaron.

 

You need to perform bash engineering. Some examples:

tmsh list ltm virtual mirror | grep -B1 enabled tmsh list ltm virtual mirror | grep -B1 enabled | grep ltm | awk '{print $3}' tmsh list ltm virtual one-line all-properties | grep "mirror enabled" | awk '{print $3}' tmsh -q -c "cd / ; list ltm recursive one-line all-properties" | grep "mirror enabled" | awk '{print $3}' # This last one to capture VS located in different partitions.

Regarding the 1000 records, you should not have any problem, but it's better to execute it when CPU/RAM consumption in management plane is low.

 

Regards,

Dario.

Regards,
Dario.

View solution in original post

8 REPLIES 8

Hello Macaron.

You can use some of these commands

## Check Mirroring Enabled tmsh show sys connection type mirror tmsh show sys ha-mirror

Regards,

Dario.

Regards,
Dario.

The first command returned 1200 plus connection records for 37 VIPs in total on F5. I need to identify VIPs which has connection mirroring enabled. Is there any command for that?

Hello Macaron.

 

You can check what SNAT IPs are mirroring with the next command:

tmsh list ltm snat mirror

The same for those VS that are mirroring their connections:

tmsh list ltm virtual mirror

And finally, the same for those VS that are mirroring their persistence records:

tmsh list ltm virtual mirror persist { $(tmsh list ltm persistence one-line all-properties | grep "mirror enabled" | awk '{print$4}') }

For disabling mirroring, you just need to modify the 'mirror' option as expected.

REF - https://support.f5.com/csp/article/K13478

 

Please, don't forget to mark this answer as the best to help me for this contribution.

 

Regards,

Dario.

Regards,
Dario.

Dairo,

  1. Thanks for the reply. when I used this command tmsh list ltm virtual mirror on an F5 with less number of VIP but the other f5 where i have almost 1000 VIPs it is asking me "are you sure you want to display 1000 records (y/n)" My question is if i say will it impact any application or slow down the application during the processing of such large number of VIPs? Also is there a way to filter VIPs where connection mirroring enabled? as this command show both enable and disabled connection mirroring on VIPs.
  2.  

 

Hello Macaron.

 

You need to perform bash engineering. Some examples:

tmsh list ltm virtual mirror | grep -B1 enabled tmsh list ltm virtual mirror | grep -B1 enabled | grep ltm | awk '{print $3}' tmsh list ltm virtual one-line all-properties | grep "mirror enabled" | awk '{print $3}' tmsh -q -c "cd / ; list ltm recursive one-line all-properties" | grep "mirror enabled" | awk '{print $3}' # This last one to capture VS located in different partitions.

Regarding the 1000 records, you should not have any problem, but it's better to execute it when CPU/RAM consumption in management plane is low.

 

Regards,

Dario.

Regards,
Dario.

Regarding the y/n, you can stop that by this,

tmsh modify cli preference pager disabled display-threshold 0

 

Thank you guys.  you are the best

Stan_PIRON_F5
F5 Employee
F5 Employee

if you want to disable it on all VS :

 

modify ltm virtual all mirror disabled