Forum Discussion

Brooksy211064_3's avatar
Brooksy211064_3
Icon for Nimbostratus rankNimbostratus
Jun 20, 2018

F5 making a passive node go active in pool without instruction

Hi Dev Central,

 

I have 2 nodes that I have put into a Pool. I only want one node active in the pool and the other as user disabled and state user-down so that I can apply updates on one server then swap the pool members and apply the update to the other server. The problem I'm facing is that after approx 20 minutes or so the F5 will make the passive server go active again which causes issues on the servers since they are not designed to be load balanced.

 

I disable and enable the nodes with scripts using plink which works until F5 puts it back in the pool again.

 

The version of of the F5 is BIG-IP 12.1.3 Build 0.0.378 Final.

 

Disable script:

 

plink -v 10.x.x.x -l root -pw ******* tmsh modify /ltm pool pl-backoffice-443 members modify { prd-fe-bo1:443 { session user-disabled state user-down } } plink -v 10.x.x.x -l root -pw ******* tmsh delete /sys connection cs-server-port 443

 

I'd really appreciate some pointers here as this is driving me insane and have reverted to disabling the node completely via the GUI which is not an ideal way as bringing the nodes back online from a disabled state isn't always successful.

 

devops
LTM

1 Reply

Sort By
  • lmiestc_26212's avatar
    lmiestc_26212
    Icon for Cirrus rankCirrus
    Jun 20, 2018

    Should you not delete the connection on the serverside as the connections to a node is on the serverside.

     

    From https://support.f5.com/csp/article/K13310

     

    Deleting existing connections to the Disabled or Forced Offline node (Optional)

     

    If after disabling or forcing the node offline, you want to delete all connections to that node, perform the following procedure.

     

    Impact of procedure: This command deletes all connections to the node's specific IP and every possible service port.

     

    Note: Connections to nodes are on the server side (ss-server) of the BIG-IP connection. Connections to virtual servers are on the client side (cs-server) of the BIG-IP connection.

     

    Log in to the BIG-IP command line. To delete all connections to the node, use the following command syntax: tmsh delete /sys connection ss-server-addr

     

     

    For example, to delete all connections to node 10.10.10.211, you would type the following command:

     

    tmsh delete /sys connection ss-server-addr 10.10.10.211