Bug ID 757760: Modifying gateway failsafe does not remove monitor from device

Last Modified: Mar 21, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP LTM(all modules)

Known Affected Versions:
12.1.0, 12.1.0 HF1, 12.1.0 HF2, 12.1.1, 12.1.1 HF1, 12.1.1 HF2, 12.1.2, 12.1.2 HF1, 12.1.2 HF2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6, 12.1.3.7, 12.1.4, 14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3

Opened: Feb 06, 2019
Severity: 4-Minor

Symptoms

In an HA pair set up with gateway failsafe, modifying the gateway failsafe configuration fails to remove the previously configured monitor. Only the unit specified in a pools gateway-failsafe-device parameter should be monitoring the pools members.

Impact

At minimum, the impact is confusion and misleading configuration. Larger impact may be involved but was not fully explored.

Conditions

HA pair is configured in gateway fail safe mode

Workaround

On the unit where the incorrect monitors exist, modify the gateway-failsafe-device to be the local unit and set the min-up-members to 0. Then sync back from the peer (with overwrite) to correct the config. On the 'broken' system (R23-S44): [root@B3900-R23-S44:Standby:In Sync] config # tmsh modify ltm pool gateway1 gateway-failsafe-device B3900-R23-S44.sea.pslab.local min-up-members 0 [root@B3900-R23-S44:Standby:Changes Pending] config # tmsh show sys ha-status all-properties| egrep '(-----|Status|Feature|Enabled|hardware|pool-mbr)' ------------------------------------------------------------------------------------------------------------------- Sys::HA Status Feature Key Action Fail Feature Take Client Proc Timeout Enabled Act Data (sec) ------------------------------------------------------------------------------------------------------------------- hardware-failover sod go-active no yes no 1 sod 0 pool-mbr-down gateway2 failover no yes no 1 mcpd 0 But config is now wrong: [root@B3900-R23-S44:Standby:Changes Pending] config # tmsh list ltm pool gateway1 ltm pool gateway1 { gateway-failsafe-device B3900-R23-S44.sea.pslab.local members { 10.2.63.146:any { address 10.2.63.146 session monitor-enabled state up } } min-up-members-checking enabled monitor gateway_icmp } Sync from peer with overwrite: [root@B3900-R23-S43:Active:Changes Pending] config # tmsh run cm config-sync to-group dg-sync-fail force-full-load-push Now on the R23-S44 all is right... [root@B3900-R23-S44:Standby:Changes Pending] config # tmsh show sys ha-status all-properties| egrep '(-----|Status|Feature|Enabled|hardware|pool-mbr)' ------------------------------------------------------------------------------------------------------------------- Sys::HA Status Feature Key Action Fail Feature Take Client Proc Timeout Enabled Act Data (sec) ------------------------------------------------------------------------------------------------------------------- hardware-failover sod go-active no yes no 1 sod 0 pool-mbr-down gateway2 failover no yes no 1 mcpd 0 [root@B3900-R23-S44:Standby:In Sync] config # tmsh list ltm pool gateway1 ltm pool gateway1 { gateway-failsafe-device B3900-R23-S43.sea.pslab.local members { 10.2.63.146:any { address 10.2.63.146 } } min-up-members 1 min-up-members-checking enabled monitor gateway_icmp }

Fix Information

None

Behavior Change