Learn F5 Technologies, Get Answers & Share Community Solutions Join DevCentral

Filter by:
  • Solution
  • Technology
Answers

ICAP Monitor

Hi,

Does anyone know if it is possible to have a ICAP monitor on BIG-IP LTM 10.2.0?
I am going to have ICAP servers on a pool and I need to have a monitor for them.
I have looked at the available list but I didn't find any.

Any ideas?

Regards,
Pavlos

0
Rate this Question

Answers to this Question

placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER

Hi,

I don't know if this is still relevant to anyone, but I have just used a standard HTTP monitor (since ICAP is clear text as well) and the ICAP OPTIONS method:

https://tools.ietf.org/html/rfc3507#section-4.10.1

send "OPTIONS icap://ICAP_SERVER ICAP/1.0\r\n\r\n"
recv "ICAP/1.0 200 OK"
2
Comments on this Answer
Comment made 30-Nov-2016 by Manuel 210

I was exactly looking for this and it works perfectly.

Thanks a lot!

0
Comment made 19-Feb-2018 by nolipineda 252

Hi Artiom,

Thanks for sharing. Would you have an idea if you can replace "ICAP_SERVER" with a variable? Would be good to do if you have multiple AV appliance in a pool.

Thanks in advance. :)

0
Comment made 20-Feb-2018 by Artiom Lichtenstein

Hi,

This is supported with External monitors:

https://devcentral.f5.com/articles/ltm-external-monitors-the-basics

You can pass environment variables and command line arguments to a custom script.

Hope this helps.

0
Comment made 20-Feb-2018 by nolipineda 252

Thanks for link but it seems like it is not required.

Here is my send string "OPTIONS icap://avscanner/avscan ICAP/1.0\r\n\r\n" and managed to get a response.

***** WORKING CAPTURE *****

OPTIONS icap://avscanner/avscan ICAP/1.0

ICAP/1.0 200 OK Date: Tue, 20 Feb 2018 07:16:34 GMT Methods: RESPMOD, REQMOD Service: ProxyAV AV scanner 3.5.4.1(182496) ISTag: "1519109626" Service-ID: avscanner Encapsulated: null-body=0 Max-Connections: 100 X-Include: X-Server-IP, X-Client-IP Allow: 204 X-Scan-Progress-Interval: 3 X-Abandon-Supported: 1 ***** WORKING CAPTURE *****

0
Comment made 20-Feb-2018 by Artiom Lichtenstein

Yeah, sure. I just thought you need per-monitor ability to use dynamic variables.

Glad you made it work!

0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER
Hi Pavlos,

If it's a single static request/response, you should be able to configure a TCP send and receive string to monitor the ICAP servers. Does each server require a different Host header value? Or could you use a generic value for all of them? If the former, you could use a single TCP monitor. If the latter, you could potentially use a TCP monitor per server and assign that to the specific pool member.

Aaron
1
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER
Hi Pavlos,

You could capture a tcpdump of a simple ICAP request and response and handcraft a custom TCP send and receive string for a TCP monitor. Here is a solution detailing the escape sequences you can use in a monitor:

SOL4186: Entering escape sequences in an ECV health monitor's send and receive strings
http://support.f5.com/kb/en-us/solutions/public/4000/100/sol4186.html

Aaron
0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER
Unfortunately, I can't do that because monitor request must carry the Request Method "OPTIONS" and  header "Host" which is different for every pool member.

Thanks for your reply.

Regards,
Pavlos


0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER
Unfortunately, they require the host header. But, you gave me enough info to proceed thank you vary much.
Regards,
Pavlos

0