Cirrusid like to query my BigIP SYSTEM and get a list of virtual servers. but only ones which have more than 1 client ssl profile applied. then print the list of virtual servers and the associated client ssl profiles using python. anyone already done something similar?
NimbostratusHi,
Normally based on the logic under your script. I have experience by using bash script to all relate configuration.
CirrusGive this a try:
!/usr/bin/env python3
import pprint
from f5.bigip import ManagementRoot
mgmt = ManagementRoot('hostname', 'username', 'password')
virtuals = {}
for virtual in mgmt.tm.ltm.virtuals.get_collection():
virtuals[virtual.fullPath] = {
'partition': virtual.partition,
'name': virtual.name,
'clientssl': [],
}
for profile in virtual.profiles_s.get_collection():
if profile.context == 'clientside':
try:
pobj = mgmt.tm.ltm.profile.client_ssls_client_ssl.load(
partition=profile.partition,
name=profile.name,
)
except:
Not a client ssl profile
pobj = None
if pobj:
virtuals[virtual.fullPath]['clientssl'].append({
'partition': profile.partition,
'name': profile.name,
})
If we didn't find more than 1 clientssl profile delete the virtual
server from the list (well, dict) of virtuals
if len(virtuals[virtual.fullPath]['clientssl']) < 2:
del(virtuals[virtual.fullPath])
pprint.pprint(virtuals)
Cirrusthanks, ill give this a go, i already see based on what your showing me, i was assuming i could get some data only making 1 call and i needed more.
Cirrusthis seems to be accepted by my F5 but its returning no data, im going to have to keep tweaking it some...thanks for pointing me down the road closer to my goal :)
CirrusI wrote that code against 11.6.0 HF5. There may be slight differences if you're running a different version. I would try removing the if/del block to see if any data comes back. If so, it may be that we're just not on the same page regarding what you're trying to pull.
NimbostratusGive this a try:
!/usr/bin/env python3
import pprint
from f5.bigip import ManagementRoot
mgmt = ManagementRoot('hostname', 'username', 'password')
virtuals = {}
for virtual in mgmt.tm.ltm.virtuals.get_collection():
virtuals[virtual.fullPath] = {
'partition': virtual.partition,
'name': virtual.name,
'clientssl': [],
}
for profile in virtual.profiles_s.get_collection():
if profile.context == 'clientside':
try:
pobj = mgmt.tm.ltm.profile.client_ssls_client_ssl.load(
partition=profile.partition,
name=profile.name,
)
except:
Not a client ssl profile
pobj = None
if pobj:
virtuals[virtual.fullPath]['clientssl'].append({
'partition': profile.partition,
'name': profile.name,
})
If we didn't find more than 1 clientssl profile delete the virtual
server from the list (well, dict) of virtuals
if len(virtuals[virtual.fullPath]['clientssl']) < 2:
del(virtuals[virtual.fullPath])
pprint.pprint(virtuals)
thanks, ill give this a go, i already see based on what your showing me, i was assuming i could get some data only making 1 call and i needed more.
Cirrusthis seems to be accepted by my F5 but its returning no data, im going to have to keep tweaking it some...thanks for pointing me down the road closer to my goal :)
NimbostratusI wrote that code against 11.6.0 HF5. There may be slight differences if you're running a different version. I would try removing the if/del block to see if any data comes back. If so, it may be that we're just not on the same page regarding what you're trying to pull.