F5 BIG-IP icon   F5 BIGIP – Send logs to custom syslog file



For debugging purposes (or to simply to organize logs as you prefer) it would be interesting to send certain syslog messages to a custom file instead of the default ones like /var/log/ltm or /var/log/apm

Desired goal

This example shows the way to send syslog messages starting with the string #DEBUG# to the file /var/log/customlog

(You can replace both string and Read more

Linux   Linux – Create multiboot CD combining multiple ISO images



This post shows the steps to create a multiboot cd with multiple Linux distributions or tools.

For example, I created a recovery / disaster case cd with the following tools:
Clonezilla (to clone/recover disks and partitions)
Gparted (partition editior with GUI)
Trinity Rescue Kit (linux distribution for recovery and repair operations on Windows machines)

The Multicd Read more

F5 BIG-IP icon   F5 BIGIP – Bug when using datagroups in LTM policies



Datagroups can be used in LTM policies to, for example, filter connections based on the client IP address (at least in my BIG-IP v13.0.0)

This is possible by adding a condition like this:
F5 BIGIP - Bug when using datagroups in LTM policies 1

“TCP” – “address” – “matches” – “in datagroup” <DATAGROUP> – at “request” time
(apply traffic on “remote” side of “external” interface)

Problem

This works correctly when the … Read more

Raspberry icon   Rasbperry – NO-IP configuration to be ran at boot time



If you need to update automatically a DNS entry with your public IP address (for example, to allow remote access to your home Raspberry or Linux), you can use the no-ip provider and its Linux or Raspberry client.

This posts shows the way to install the client and how to configure it to be started at boot time.

Register at

Read more

Security   Security – Convert PFX to PEM using Windows or Linux



For certain application, a job partner asked me to send him certain certificate with private key in PEM format. Normally I’m using PFX format, but with a little help of the openssl toolkit converting PFX to PEM is quite easy.

Windows

openssl for windows can be downloaded here: http://gnuwin32.sourceforge.net/packages/openssl.htm
After extracting the contents, inside the bin subfolder the openssl … Read more

F5 BIG-IP icon   F5 BIGIP – Modify URI path using local traffic policy



Im using my F5 BIGIP (v13) as reverse proxy to publish some websites by using local traffic policies. But i need to perform a URL rewriting. To be specific, i need to strip a string from the URI path.

It could be done using an IRule:

when HTTP_REQUEST{
if { [string tolower [HTTP::uri] ] starts_with "/path1" } {
  HTTP::uri [string 
Read more

F5 BIG-IP icon   F5 BIG-IP – Rollback tmsh commands



Today a very short and simple post to learn how to rollback configurations performed via tmsh.
After executing some commands, if finally we need to undo those changes we can get it, at least, by the following ways:

    • In case of HA environment, the standby node configuration can be sync so that we set the active (changed) node to
Read more

F5 BIG-IP icon   F5 BIG-IP – Apply SNAT to client subnet or IP



In certain scenarios it can be interesting or necessary to apply SNAT only to certain client IPs when accesing a virtual server to  f.e. avoid assymetric routes, when the server gateway is not the F5… (take a look at this link for more examples).

These are the steps (im using BIG IP v13)…

Create a SNAT pool

I prefer the … Read more

EXCHANGE   Exchange – Setting automatic completion time for Mailbox Move Request



When performing mailbox migrations using the New-MoveRequest, the movement is performed online while the user is using the mailbox without suffering outage until the end.
Only when completing the movement there are some seconds during which the user mailbox is not online.

Thats the reason to use the parameter “SuspendWhenReadyToComplete“. It moves almost all the mailbox except the … Read more

F5 BIG-IP icon   F5 BIG-IP – Useful SNMP oids to monitor



I have collected some of the most interesting OIDs (in my scenario im using LTM and APM modules) from the F5 MIBS:

OIDs – System Data

Hardware sensors (fans, power supplies…), resource usage (cpu, mem…), sync status…
MIB: F5-BIGIP-SYSTEM-MIB (file F5-BIGIP-SYSTEM-MIB.txt)

Synchronization status messagesysCmSyncStatusSummary.1.3.6.1.4.1.3375.2.1.14.1.4
Failover statussysCmFailoverStatusStatus
.1.3.6.1.4.1.3375.2.1.14.3.2
Synchronization status colorsysCmSyncStatusColor
.1.3.6.1.4.1.3375.2.1.14.1.3
Power Supply statussysChassisPowerSupplyStatus
.1.3.6.1.4.1.3375.2.1.3.2.2.2.1.2
Read more