Access to F5's mysql from remote server
Hi there, I need to export a lot of learning suggestions from the ASM together with request data which triggered these suggestions. GUI does not allow to export learning suggestions. I realized that ASM learning suggestions are stored in the local mysql database PRX, to which I have access from F5's CLI as the 'asm' user. In order to work with these data efficiently and also because F5 does not allow me to install additional Python modules directly on the F5, I thought I could connect to this database from my remote server. But it looks like the F5 is refusing TCP/3306 connections although the 'asm' user is granted required privileges: GRANT USAGE ON *.* TO 'asm'@'%' IDENTIFIED BY PASSWORD '****' I assume that mysql is only allowing local connections from localhost, but I cannot verify it because I am not able to find the my.cnf on the F5 system. I tried connecting through management interface and also selfIP, but nothing worked. Port lock-down for my selfIP is allow any. According to netstat, F5 should be listening to port 3306 on all interfaces: tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN 19397/mysqld TCPDUMP on the last firewall in front of the F5 shows me SYN reaching the F5 and immediate RST sent back from the F5. Any ideas how to connect to F5 mysql from remote server? What do I need to check further? Is it even allowed by the system? thanks.
MySQL active connection never bleed off to other pool member
I am running galera MySQL behind F5 with performance Layer 4 type and i have setup 3 mysql node in pool member with Priority so only 1 mysql node will be used and other two will be standby. So everything was good but i found today when i shutdown Primary node which was active and i found my application break and when i have checked logs found: (2006, "MySQL server has gone away (error(104, 'Connection reset by peer'))") So solution was restart application, look like active member mysql connection not bleeding off to other pool member, what is wrong with my setup?
MySQL Write Master iRule
I'm trying to write an iRule to send all INSERT and UPDATE MySQL queries to a single node in a cluster- is this possible? I see that the F5 can be aware of HTTP content and route based off of that: when HTTP_REQUEST { if { [HTTP::uri] starts_with "/admin" } { node 10.1.1.200 8080 } else { pool HTTP_pool } } Is there something similar for reading streams from TCP connections to non-HTTP traffic?
MySQL Monitor (or EAV) with SSL?
We are migrating to MySQL, and I would like to use our F5 LTM to load balancer the ( MySql Enterprsie, 3-node) cluster. I have upgraded to Bigip 15.1.3 (from 14.x.x) per Support as version 15 should have a working MySQL Monitor. However, it still times out connecting. A simple telnet test from the LTM CLI connects to the mysql port, so networking is not an issue. I then had the idea of copying up the client SSL certs and seeing if the local mysql client on the LTM would connect, but I get an error about "ERROR 2059 (HY000): Authentication plugin 'caching_sha2_password' cannot be loaded: /usr/lib/mysql/plugin/caching_sha2_password.so: cannot open shared object file: No such file or directory" So the built-in MySQL Monitor can't use SSL (what century is this anyway?), and the on-board mysql client apparently has issues with SSL as well. Any way to do this? I'd rather not give my developers a reason to set up some kind of HA Proxy junk. I don't need more infrastructure to maintain.
Where to find raw HTTP Request for ASM violations?
Where can I find the raw HTTP Request that is logged with ASM violations? The version that is printed to the browser in Security->Event Logs->Application->Requests appears to be inserting a Replacement Character at the location of (presumably) a multibyte UTF-8 character. If I cut and paste the text from the browser, it contains a UTF-8 Left-to-Right Embedding character and the Replacement Character (with words in between). But I'm guessing that Replacement Character is not what the client actually sent, just what I'm ending up with after it's been processed by the web stack. I have explored the underlying MySQL database a little and the violation itself is logged in PRX.REQUEST_LOG, but the HTTP Request that gets shown when I browse in the web UI is not in that table, nor do I see it in any other table in PRX. It's in the database somewhere, because I can string match it in ibdata1. Does anyone know which table stores the HTTP Request raw data for ASM violations? Is there any documentation for the schema of the databases in MySQL on the F5 (DCC, PLC, PRX, WIZ)?
How many access log records can entries APM v13.x ?
Dear all How many access log records can entries APM v13.x ? I am useing APM. I confirmed that v11.x can hold the access log of 5000000 in the database. But I can't found v13.x is same or not. https://support.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-config-11-4-0/apm_config_loggingandreporting.html If you know, please tell me.Use iRules-LX to Blue/Green Deployment
Hello I've been learning IRules-LX，I hope to get http post username through iRules,Then used the username call to node.js(mysql npm) select mysql database.if the username select result is "green".loadbalance to green pool. Or else loadbalance to blue pool. Has anyone ever tested it ? Is there an I/O bottleneck? Thanks everyoneConnection to MySQL using BIG IP
Dear all Sorry for the very basic questions but I am new in this environmet ( I am working on a project where I have to balance 3 read/write servers thorough a BIG F5 that costumer manages ) What are the required changes in configuration to a Java client to interface with BigIP ? Do I need to use Connector/J ? Can I use the virtual IP of load balancer in the connection string ? What do I need to have installed in the BIG IP ?
Database Proxy
I have a scenario where I want to perform database proxying (using multiple databases - Oracle; MSSQL; MySQL) etc. I want to send to different pools based on read/write queries. I have seen there was a fair amount of chatter about this years ago (2013) but I haven't seen anything recently. Is this something F5's can do? Are there any iApps or do you have to create a custom iRule? Any help would be much appreciated!