Forum Discussion

Will_'s avatar
Will_
Icon for Nimbostratus rankNimbostratus
Nov 10, 2014

Test VIP on Standby

Would you happen to know of a way to connect to the VIP on the standby BigIP? I tried "curl", via CLI, on the standby but the bugger goes to the active box to connect. I was hoping it would make an internal call, since I am on the same box, on the client-side and have the standby issue the get on the server-side with its own MAC. For this exercise I am less concerned about the server-side. I just want "curl" to connect to the VIP (like a lookback call) and see the SSL certificate get issued. If I am dreaming here please let me know. If you know of something would appreciate you sharing.

 

-Will

 

3 Replies

  • R_Eastman_13667's avatar
    R_Eastman_13667
    Historic F5 Account

    I believe that in HA configuration, the route for the vip always points to the active unit even from the standby unit.

     

  • R_Marc's avatar
    R_Marc
    Icon for Nimbostratus rankNimbostratus

    There is a hacky way you could do it if you really needed to test it for some reason. Create a second virtual on the standby in a local only traffic group. Use an iRule on that new virtual to select the virtual you want to test.

    when CLIENT_ACCEPTED {
        virtual the-virtual-you-want-to validate
    }
    
  • The reason you can't connect to the VIP on the standby device is that the active device will be responding to any ARP requests for the IP address of the virtual server. You will have to implement the virtual targeting virtual scenario as suggested by R Marc if you really need to do this.