Forum Discussion

Mark_McKinley_6's avatar
Mark_McKinley_6
Icon for Nimbostratus rankNimbostratus
Jan 12, 2017

Data center folder sync problem

My actual config is a little more complicated, but for the sake of keeping this question simple I am going to minimize it.

 

I have a bigip ltm unit in datacenterA and a bigip ltm unit in datacenterB. The datacenters are connected with a point to point so a trust relationship can ( and has) been established between the units. The datacenters do not have the same network infrastructure so a sync-failover group is not what I am after.

 

I just want the irules to be kept in sync from one unit to the other.

 

I read through the manuals and found mention of a device service cluster, using a device group (sync-only) and segregating the objects that I want into a folder under the partition the VIPs and pools are located on. YES, exactly what I wanted.

 

The confusion comes in when I tried to set the device group of the folder. Since my configs are all in /Common partiton and my folder is /Common/stuff-to-sync the F5 will not allow me to set the device group of my folder.

 

If I make a new partition and set the device group it works BUT all my VIPs in the /Common folder cannot reference objects outside of the /Common partition.

 

All I want to do is sync my Irule changes between A and B while the rest of the config on the unit is specific to that datacenter.

 

1 Reply

  • Looks like what I was missing was one line.

     

    modify sys folder /Common/datacenter-sync traffic-group non-default modify sys folder /Common/datacenter-sync traffic-group none modify sys folder /Common/datacenter-sync device-group datacenter-sync-devgroup

     

    With these line you can create a folder under the Common partition, decouple that folder from the traffic group, assign it to another device group that can have your other datacenter devices as members and move objects into it for cross site synchronization.

     

    to enable the object move feature

     

    modify /sys db mcpd.mvenabled value true

     

    and then you can do things like

     

    mv ltm rule /Common/irule_that_can_be_used_anywhere to-folder /Common/datacenter-sync mv ltm profile /Common/your_default_tcp_profile to-folder /Common/datacenter-sync