NetWiki

I can make net work

User Tools

Site Tools

Trace:
f5:start

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
f5:start [2023-08-26 14:01] – davef5:start [2026-01-06 18:39] (current) – [Show TCP connections] dave
Line 1: Line 1:
 ====== F5 ====== ====== F5 ======
 Info related to F5 BIG-IP Load Balancers. Info related to F5 BIG-IP Load Balancers.
-FIXME - formating issues. 
  
 ---- ----
Line 12: Line 11:
  
 ====List pools that contain a member==== ====List pools that contain a member====
-<pre>tmsh -q list ltm pool one-line | grep -E '($node_hostname|$node_ip)' | awk '{ print $3 }'</pre>+<code>tmsh -q list ltm pool one-line | grep -E '($node_hostname|$node_ip)' | awk '{ print $3 }'</code>
  
 Create node: Create node:
-<pre>create ltm node NODE_NAME address NODE_IPADDRESS monitor icmp +<code>create ltm node NODE_NAME address NODE_IPADDRESS monitor icmp 
-</pre>+</code>
 Modify or create pool: Modify or create pool:
-<pre>+<code>
 modify ltm pool POOL_NAME members add { NODE_NAME:PORT NODE_NAME:PORT } modify ltm pool POOL_NAME members add { NODE_NAME:PORT NODE_NAME:PORT }
  
Line 24: Line 23:
  
 show ltm pool POOL_NAME  members | grep MEMBER show ltm pool POOL_NAME  members | grep MEMBER
-</pre>+</code>
  
 ---- ----
 ====Find the virtual servers using an SSL profile==== ====Find the virtual servers using an SSL profile====
-<pre>tmsh list /ltm virtual /Partition/* | grep -E "virtual|SSL_PROFILE_NAME"+<code>tmsh list /ltm virtual /Partition/* | grep -E "virtual|SSL_PROFILE_NAME"
 ltm virtual /Partition/VIRTUAL_SERVER_01 { ltm virtual /Partition/VIRTUAL_SERVER_01 {
 ltm virtual /Partition/VIRTUAL_SERVER_02 { ltm virtual /Partition/VIRTUAL_SERVER_02 {
Line 41: Line 40:
         /Partition/SSL_PROFILE_NAME_BONUS {         /Partition/SSL_PROFILE_NAME_BONUS {
 ltm virtual /Partition/VIRTUAL_SERVER_09 { ltm virtual /Partition/VIRTUAL_SERVER_09 {
-</pre>+</code>
 The virtuals followed by the indented profile name are the ones using that profile.<br> The virtuals followed by the indented profile name are the ones using that profile.<br>
 **Note:** This can turn up other profiles that match, like the one named SSL_PROFILE_NAME_BONUS in the example. **Note:** This can turn up other profiles that match, like the one named SSL_PROFILE_NAME_BONUS in the example.
Line 47: Line 46:
 ---- ----
 ====Show TCP connections==== ====Show TCP connections====
-[https://support.f5.com/csp/article/K53851362 K53851362: Displaying and deleting BIG-IP connection table entries from the command line]+[[https://support.f5.com/csp/article/K53851362|K53851362: Displaying and deleting BIG-IP connection table entries from the command line]]
  
-Show TCP connections to VS 1.2.3.4:<br />+Show TCP connections to VS 1.2.3.4:
 <code>tmsh show sys connection {cs-server-addr 1.2.3.4 protocol tcp}</code> <code>tmsh show sys connection {cs-server-addr 1.2.3.4 protocol tcp}</code>
  
-Show connections to a pool member on port 443:<br />+Show connections to a pool member on port 443:
 <code>tmsh show sys connection {ss-server-addr 1.2.3.4 ss-server-port 443}</code> <code>tmsh show sys connection {ss-server-addr 1.2.3.4 ss-server-port 443}</code>
  
-Count connections to a pool member:<br />+Count connections to a pool member:
 <code>tmsh -q show sys connection {ss-server-addr 1.2.3.4} | awk -F ":" '{print $1}' | sort -u | wc -l</code> <code>tmsh -q show sys connection {ss-server-addr 1.2.3.4} | awk -F ":" '{print $1}' | sort -u | wc -l</code>
  
Line 65: Line 64:
 A command that F5 wanted run when a box had high CPU. A command that F5 wanted run when a box had high CPU.
  
-ps aux > ~/$(cat /proc/sys/kernel/hostname | cut -d'.' -f1)_ps.txt+<code>ps aux > ~/$(cat /proc/sys/kernel/hostname | cut -d'.' -f1)_ps.txt</code>
  
 ==== SSL Troubleshooting ==== ==== SSL Troubleshooting ====
 +<code>
 curl -k https://URL_OR_IP/ curl -k https://URL_OR_IP/
 curl -iv https://URL_OR_IP/ curl -iv https://URL_OR_IP/
 openssl s_client -connect URL_OR_IP:443 -prexit openssl s_client -connect URL_OR_IP:443 -prexit
 +</code>
  
 ---- ----
Line 78: Line 79:
 http://www.tcl.tk/man/tcl8.4/TclCmd/clock.htm http://www.tcl.tk/man/tcl8.4/TclCmd/clock.htm
  
-<pre>+<code>
 set var clock format [clock seconds] -format {%d-%m-%y:%H:%M:%S %Z} set var clock format [clock seconds] -format {%d-%m-%y:%H:%M:%S %Z}
 11-08-14:00:49:41 PDT 11-08-14:00:49:41 PDT
Line 84: Line 85:
 set var clock format [clock seconds] -format {%d/%b/%Y:%H:%M:%S %z} set var clock format [clock seconds] -format {%d/%b/%Y:%H:%M:%S %z}
 11/Aug/2014:13:35:34 -0700 11/Aug/2014:13:35:34 -0700
-</pre> +</code> 
-Note: The second option is CLF (Common Log Format), which is used in [https://httpd.apache.org/docs/2.4/logs.html apache's access logs].+Note: The second option is CLF (Common Log Format), which is used in [[https://httpd.apache.org/docs/2.4/logs.html|apache's access logs]].
  
  
 ====Displaying all IP addresses in the BIG-IP configuration==== ====Displaying all IP addresses in the BIG-IP configuration====
-[https://support.f5.com/csp/article/K34314310 K34314310: Displaying all IP addresses in the BIG-IP configuration]+[[https://support.f5.com/csp/article/K34314310|K34314310: Displaying all IP addresses in the BIG-IP configuration]]
  show /sys ip-address  show /sys ip-address
  show /sys ip-address all-properties  show /sys ip-address all-properties
Line 95: Line 96:
 ====Map from CLI==== ====Map from CLI====
 List all the VS and Pool members in one command. It's not quite the Map but it's close enough. List all the VS and Pool members in one command. It's not quite the Map but it's close enough.
-<pre>+<code>
 tmsh list ltm virtual all-properties one-line | perl -ne '($vs) = /ltm virtual (\S+)/; ($dest) = / destination (\S+)/; ($pool) = / pool (\S+)/; { print "$vs $dest $pool\n" }' | (while read vs dest pool; do members=$(tmsh list ltm pool $pool members | perl -ne 'if (/^        (\S+) {/) {print "$1\t" } elsif (/ address (\S+)/) { print "$1\t" }'); echo $vs $dest $pool $members; done) > /var/tmp/virtuals.csv tmsh list ltm virtual all-properties one-line | perl -ne '($vs) = /ltm virtual (\S+)/; ($dest) = / destination (\S+)/; ($pool) = / pool (\S+)/; { print "$vs $dest $pool\n" }' | (while read vs dest pool; do members=$(tmsh list ltm pool $pool members | perl -ne 'if (/^        (\S+) {/) {print "$1\t" } elsif (/ address (\S+)/) { print "$1\t" }'); echo $vs $dest $pool $members; done) > /var/tmp/virtuals.csv
-</pre>+</code> 
 + 
 +==== Show persistence records ==== 
 +<code> 
 +show ltm persistence persist-records pool POOL_NAME 
 +</code>
  
f5/start.1693058518.txt.gz · Last modified: by dave
Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki