BIG-IP
10546 TopicsF5 upgrades
We are upgrading F5 tenants from 17.1 to 17.5. We have Two R-series pairs at each data center ( ex:main and colo) Within the data center, they are in HA active standby and the 4 are in a GSLB group . Each host has one tenant During the upgrade process, I disabled GTM Sync on the F5 that is going to be upgraded. Is it recommended? I plan on having traffic moved to this active box at ex colo from the other data center main, I won't be making any config changes . After the applications move to this side, LTM pools show up on this side and global availability will have the upgraded side up. just want to make sure, if that is disabled, do we need to leave them disabled and sync them after all the 4 F5s are upgraded? during this process, can we make changes with the data center on LTM pools? Thank you103Views0likes2CommentsStruggling with Node.js API for Searching Profiles Across Multiple F5 Devices
Hey everyone, I’m working on a Node.js API that connects to my frontend and allows users to search for an SSL or LTM profile by name and get back all the relevant details. The twist is that the profile could live on any one of 40+ F5 devices (different mgmt IPs). Here’s what I’ve done so far: I’m using the F5 REST API and creating a session token for each mgmt IP to avoid basic auth on every call. I built a loop to query each device, aggregate results, and return the profile details if it exists. The problem: It’s not consistent. Sometimes the profile is found; other times it’s missed—even though it’s definitely there. I’m getting timeouts pretty frequently, which adds to the frustration. Feels like I’m doing too many sequential calls and maybe hitting performance or token issues. Has anyone tackled something similar? How do you structure your calls to make them reliable across multiple devices? Is there a recommended pattern for handling large-scale F5 REST calls in Node.js (parallelization, rate limits, caching)? Should I stick to session tokens or consider another auth pattern? Any tricks for minimizing timeouts when calling multiple mgmt IPs? Any examples, best practices, or lessons learned would be hugely appreciated. At this point, I’m looking for a clean way to make this work reliably before I refactor again. Thanks58Views0likes1CommentF5 Open telemetry issue
Hi all, we have the issue with TS on f5, we installed TS package, set up declaration but when we are checking f5 url/telemetry we dont see atribute which we should see in the attachment you can see the declaration we have used and posted on f5 expecting to see everything, but we see only some basic status, not eg: f5 pool active members, f5 pool availability we dont see any errors in /var/log/restnoded/restnoded.log and when we check url: localhost/mgmt/shared/telemetry/pullconsumer/metrics we see nothing useful. Any help would be appreciated.59Views0likes1CommentThe children pool members are down
Hello, I am new with F5. When configured F5 to load balancing traffic with SSL feature for Azure VMs, we use Azure load balancer as interface which will receive all traffic from Internet then distribute to F5 and Web backend server. After created Virtual server, Pool and Node in F5, also enabled Azure NSG rules which allowed communicate between F5 and Web backend, the pool shows that the children pool members are down. By telnet from another VM to Web backend server, it is said that port service is working well. Not sure what did we miss with the configuration. Looking forward to your advice.81Views0likes3Commentscontent-encoding response error
need help please! when i connect direct to a server i get response content-encoding as gzip however when i go to the server via a f5 virtual server no response header is received. do i need http compression file? how can i resolve any pointers would be great369Views0likes2CommentsNeed- F5 webserver for to setup own lab (not LAMP server in the partner portal)
Hi Team / Experts, Anyone please share me the F5 webserver(backend server) which is used to setup F5 official lab for training. I got lamp server from f5 partner portal, but i want to setup same F5 training lab in my home to prepare and practice with F5 official training material. It would be more helpful if anyone guided me or share me those official lab setup with webserver(backend server). Thanks, RK2KViews0likes10CommentsMTLS - How to authenticate a specific certificate
We have a VIP configured on F5 with MTLS. I have used publicly trusted certificates as server and client certificate while configuring MTLS. The behavior, I was expecting is calling application would be authenticated only when exact same client certificate is used which is used from setting up MTLS. Actual Behavior, calling application is able to authenticate with any client certificate, provided it is signed by the same root CA as the client certificate that is used for setting up MTLS. I just wanted to understand if there is a way to get the expected behavior without writing a irule or a policySolved110Views0likes1CommentHTTPS/SSL Certificate Error DLG_FLAGS_INVALID_CA
Hello all, I'm trying to work this out, but I will need some help from you guys. I'm running apache2 on Debian 9, the apache web server is behind an f5 big Ip that does load balancing and manage the SSL encryption and decryption for the apache web server. The certificate is installed on F5 but when I try to reach the web page I get this error: "Your PC doesn’t trust this website’s security certificate. The hostname in the website’s security certificate differs from the website you are trying to visit. Error Code: DLG_FLAGS_INVALID_CA DLG_FLAGS_SEC_CERT_CN_INVALID " in the certificate the domain assigned is *.mysite.com on the apache2 web server I've tried the following: in apache2.conf I've tried to define ServiceTokens FULL SecServerSignature "; In /enabled-website/000-default.cof: ServerName mywebsite.com ServerAlias *.mywebsite.com but still throwing that error, could you please help me with this? Regards, Valerio915Views0likes2Comments