AS3 add another VS to existing tenant
I have deployed the sample AS3 script to create a VS with pool and pool members from here: { "class": "AS3", "action": "deploy", "persist": true, "declaration": { "class": "ADC", "schemaVersion": "3.0.0", "id": "urn:uuid:33045210-3ab8-4636-9b2a-c98d22ab915d", "label": "Sample 1", "remark": "Simple HTTP Service with Round-Robin Load Balancing", "AS1": { "class": "Tenant", "A1": { "class": "Application", "template": "generic", "MyVS1": { "class": "Service_HTTP", "virtualAddresses": [ "10.0.1.11" ], "pool": "web_pool_1" }, "web_pool_1": { "class": "Pool", "monitors": [ "http" ], "members": [ { "servicePort": 80, "serverAddresses": [ "192.0.1.10", "192.0.1.11" ] } ] } } } } } Now I want to add another VS to the same tenant (same partition) but when I edit the above script and deploy this: { "class": "AS3", "action": "deploy", "persist": true, "declaration": { "class": "ADC", "schemaVersion": "3.0.0", "id": "urn:uuid:33045210-3ab8-4636-9b2a-c98d22ab915d", "label": "Sample 1", "remark": "Simple HTTP Service with Round-Robin Load Balancing", "AS1": { "class": "Tenant", "A1": { "class": "Application", "template": "generic", "MyVS2": { "class": "Service_HTTP", "virtualAddresses": [ "10.0.1.12" ], "pool": "web_pool_2" }, "web_pool_2": { "class": "Pool", "monitors": [ "http" ], "members": [ { "servicePort": 80, "serverAddresses": [ "192.0.1.12", "192.0.1.13" ] } ] } } } } } It replaces the old configuration and I only have MyVS2. How can I add MyVS2 to the current configuration without losing MyVS1?
Disable HTTP OPTIONS method and Disable TCP Timestamp responses
Hi, So we run a penetration testing and we found 2 of our VIPs affected by these: a. Disable HTTP OPTIONS method b. Disable TCP Timestamp responses Is there a way to remediate this? I tried looking in the internet but: a. Disable HTTP OPTIONS method - i only see to change it globally on the F5 (probably will affect other VIP), is there another way? b. Disable TCP Timestamp responses - I can't seem to find a proper way to address this, is there a way? Hoping for help. Thanks!
Rest APi Update iRule
Hi There I have been researching this all day and cannot seem to get a solution. I am trying to "Update" an iRUle using the Rest API. Im using powershell and am getting the below error: Invoke-RestMethod : {"code":400,"message":"incomplete command","errorStack":[],"apiError":26214401} here is my code: $body = @{apiAnonymous = 'Redirect Traffic to 2 pools based on the URI when HTTP_REQUEST { if {[string tolower [HTTP::uri]] contains "/1111/"} { pool A } else { pool B } '} | ConvertTo-Json Invoke-RestMethod -Method PATCH -Uri "https://1.1.1.1/mgmt/tm/ltm/rule/~Partition~coolirule" -Credential $mycreds -body $body -ContentType "application/json" The only information i can find on this suggests that i delete my iRule and create a new one.... i would like to try and avoid this if i can. Regards Tim
f5fpc on linux and IPv6
Hi, we are just evaluating BIG-IP vpn right now. On windows, mac and android clients connections seem to be successful with IPv6, but on linux I am having troubles here. Using the browser plugin and f5fpc are showing the same faulty problem: The client says that it got an IPv6 adress, but the OS does not see it. ip a only shows the IPv4 adress (which we do not use, we are using IPv6 only), when trying to add an IP manually I am getting permission denied (I suppose f5fpc is locking the tun interface). Does anyone know the problem? If I can add more information, please let me know. Best regards and thanks in advance, Otto
Changing host names
In a VCMP with 2150 blade guests on 11.6.1 HF2 and changing guest hostnames; is it advisable to change at host? Config utility? Or is it suitable to also change at individual LTM level config utility or vi editor? I've read a couple KB articles warning of potential problems with something seemingly so simple.
Blade assign incorrectly interfaces to VCMP
I'm setting up two viprions, and when performing connectivity tests, the computer that will be the standby is not responding, a trunk for port 7 and 8 was configured with lacp active in both Viprion host, when we check the interfaces in the vguest, on the first computer the Ports are inherited from the host, but on the second computer are different interfaces 5 and 6 (on the host are 7 and 8), is it possible to change the interfaces that the host assigns to vcmp? Or is there any way to correct the interfaces? I try to modify the host interfaces in vguest but they appear as pending
