For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ed_Martens's avatar
Ed_Martens
Icon for Cirrus rankCirrus
Jul 15, 2022
Solved

Using shared object with BigIP

Hi, Just a "stupid" question: Is there a reason  NOT to use Shared object address list's with a VS? In contrast  using  multiple VS configurations (when only destination address is the difference)...
address list
application delivery
BIG-IP
shared object
virtual server
  • StephanManthey's avatar
    StephanManthey
    Jul 15, 2022

    Please lookup your /config/bigip_base.conf for the ACL related configuration objects.

    The shared objects concept may significantly reduce the number of configuration objects, i.e. mixing IPv4/IPv6 source/destination addresse in lists. Same story for destination ports.

Ed_Martens's avatar
Ed_Martens
Icon for Cirrus rankCirrus
Jul 15, 2022

Hi Stephan,
Thanks for the response. This is the same version we are running at the moment 😉

StephanManthey's avatar
StephanManthey
Icon for Nacreous rankNacreous
Jul 15, 2022

Please lookup your /config/bigip_base.conf for the ACL related configuration objects.

The shared objects concept may significantly reduce the number of configuration objects, i.e. mixing IPv4/IPv6 source/destination addresse in lists. Same story for destination ports.

  • Ed_Martens's avatar
    Ed_Martens
    Icon for Cirrus rankCirrus
    Jul 15, 2022

    The mix of IPv4/IPv6 is exactly why I want to use it.
    Butissues will also be there , no matter what solution you will implement.
    My biggest "concern" is making 2 VS (1 IPv4 and 1 IPv6) is that you need to do every config change twice. Which is a potential problem, as somebody making changes to only one VS.


    By the ACL in the config file you mean "security firewall address-list"  As they must be/should be the same as the configured lists?

    • LiefZimmerman's avatar
      LiefZimmerman
      Icon for Admin rankAdmin
      Jul 19, 2022

      Doesn't seem this is quite sorted yet? Ed_Martens - have you come to any new understandings here? or is this still a potential problem?

      I'd be happy to get some Eng's to take a look here if what StephanManthey said isn't 'the final word'.

      • Ed_Martens's avatar
        Ed_Martens
        Icon for Cirrus rankCirrus
        Jul 20, 2022

        Hi,
        It is not a problem,

        But he answer is in the line of my own thoughts.
        I'll "Accept the Solution"