Learn F5 Technologies, Get Answers & Share Community Solutions Join DevCentral

Filter by:
  • Solution
  • Technology
Answers

Does LTM any advanced health monitor for RDP service?

Hi all
I have a customer use the LTM for windows terminal server load balancing . They met a problem that the tcp 3389 health check was ok but the server was not available for RDP service. Do we have any advanced health monitor or any solution for this problem.
Thanks and regards
baoquan
0
Rate this Question

Answers to this Question

placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER
you could use the wmi monitor, but I think that requires IIS to be running on each of your terminal server instances, which isn't a very efficient use of resources. I've yet to find a *nix script to validate the service availability. If you find one, please post back, you aren't alone in this issue.
0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER
Does any one resole this problem?
0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER
We experienced the same thing today...has anyone come to a resolution on it? I am researching ways to do this, but please post back if you have the answers.

Thanks!
0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER
Byang and ScottB,

What kinds of send and receive strings have you tried thusfar? And just to be clear, what versions are you both using?
0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER
I dont have any send or receive strings configured - just TCP:3389

running v9.4.7 HF2

Thank you for the quick reply, this is under the microscope of my management and would like to make them feel all wrm and fuzzy ;-)
0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER
Old post I know but just thought I'd check if anyone did get a resolution to this - would be useful at my workplace.

Thanks
N
0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER
You could work from the logic in this nagios check, which uses python to validate the x224 protocol. Still not a sure thing RDP is truly available, but closer than a tcp response, which especially wih RDP, is very misleading.

http://exchange.nagios.org/directory/Plugins/Remote-Access/check_x224/details Click Here
0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER

It would be great if F5 implemented a proper monitor for RDP! (hint hint)
0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER
Hello,

did anyone found a solution ?

Thanks
R.
0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER
Try this alternative:

Download and build Zenoss' wmic on a CentOS system:

[root@CentOS ~] # wget http://dev.zenoss.org/svn/trunk/inst/externallibs/wmi-1.3.14.tar.bz2
[root@CentOS ~] # tar xfj wmi-1.3.14.tar.bz2
[root@CentOS ~] # cd wmi-1.3.14
[root@CentOS wmi-1.3.14] # make

Transfer wmic binary to your LTM:

[root@CentOS wmi-1.3.14] # scp   Samba/source/bin/wmic   root@YourLTM:/usr/local/bin

Test wmic from your LTM:

[root@YourLTM] ~ # wmic  -U [domain/]adminuser%password //host "select State from Win32_Service where Name='TermService'"
CLASS: Win32_Service
Name|State
TermService|Running

Sample code on how to check whether or not RDP service is running:

wmic  -U [domain/]adminuser%password //host \
"select State from Win32_Service where Name='TermService'" \
| egrep "^TermService\|Running$" >/dev/null 2>&1

if [ $? -eq 0 ]; then
   echo "UP"
fi

Good luck ...
0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER
Nice work Humphrey! You could reference that executable in this external monitor template:

http://devcentral.f5.com/wiki/default.aspx/AdvDesignConfig/TemplateForExternalLtmMonitors.html

Aaron
0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER
very cool! Many MANY people have requested this functionality over the years.
0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER
I tested this out today and wrote it up. Fantastic work, Humphrey!

http://devcentral.f5.com/Tutorials/TechTips/tabid/63/articleType/ArticleView/articleId/1086419/Monitoring-Windows-Terminal-Services-from-BIG-IP.aspx Click Here
0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER
Great guys. There are a ton of past requests on this. Anyone want to reply to these posts with the new solution?

Creating a Monitor that checks Windows Services?
http://devcentral.f5.com/Default.aspx?tabid=53&view=topic&postid=85575&ptarget=85575

Monitoring a windows service
http://devcentral.f5.com/Default.aspx?tabid=53&forumid=32&tpage=1&view=topic&postid=23312

Monitoring a Microsoft Windows Service
http://devcentral.f5.com/Default.aspx?tabid=53&forumid=32&tpage=1&view=topic&postid=32382

Enable window services with an Irule
http://devcentral.f5.com/Default.aspx?tabid=53&view=topic&postid=60221&ptarget=60221

Monitoring Microsoft Analysis Services
http://devcentral.f5.com/Default.aspx?tabid=53&view=topic&postid=31011&ptarget=31011

Aaron
0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER
Will do...and done.
0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER
Glad to know that it's useful.

Actually, we can create more monitors for windows services/resources (eg. cpu/memory/disk/etc) and I think it would be great if F5 implement this to LTM.

Thanks Jason for correcting me about copying the wmic binary to the read-only /usr/local/bin on your article

Thanks Aaron for the monitor template ...
0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER
I got a comment on the article about wmic being heavy resource wise, and to take a look at winexe, so I'll probably do a write up on that as well and then maybe do some performance comparisons.
0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER
fyi, winexe can also be found in wmi-1.3.14/Samba/source/bin
0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER
huh, that it is. So forget building from scratch... thanks. Was having trouble compiling it anyway. Thanks!
0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER
wait...does winexe actually install a service on the windows server? It looks like that's what is being attempted:

[jrahm@localhost bin]$ winexe -U testdom/testaccount%testpassword //192.168.22.31 "sc query TermService"
[winexe/winexe.c:120:on_ctrl_pipe_error()] ERROR: Failed to install service winexesvc - NT code 0x00000424

If that's the case, that doesn't seem as desirable as using the wmi interface. Thoughts?
0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER
Yes, it seems like winexe copies winexesvc.exe to ADMIN$ share, creates winexesvc service, starts it and tries to connect to this service.

I personally prefer using wmi as most of windows server already running wmi and it doesn't fork another process, CMIIW ...
0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER
yeah, I think wmi is definitely the way to go here. winexe seems a little dangerous.
0