Symptoms

When a Cloud Auto Scaling deployment is set up using F5's Auto Scale Template, and ASM Live Update is configured with Automatic Download enabled, the configuration may be overwritten during a scale out event when a new host joins the sync cluster. This is caused by a config sync from the new device to the primary device, before the primary has a chance to sync the configuration to the new device, causing the configuration in the primary device to be overwritten.

Impact

Configuration of all devices in the Auto Scale group is overwritten.

Conditions

-- Using F5's Auto Scaling template. -- Auto Scale script is configured with --block-sync (which is the default). -- ASM Live Update is configured with Automatic Download enabled. -- A scale out event occurs.

Workaround

Disable ASM Live Update Automatic Download. This can be done by disabling the liveupdate.autodownload DB variable using the onboard.js script, and adding '-d liveupdate.autodownload:disable'. For example: /usr/bin/f5-rest-node /config/cloud/aws/node_modules/@f5devcentral/f5-cloud-libs/scripts/onboard.js --log-level silly --signal ONBOARD_DONE -o /var/log/cloud/aws/onboard.log --host localhost --port 8443 -d tm.tcpudptxchecksum:software-only -d liveupdate.autodownload:disable --ping -d tm.tcpudptxchecksum:software-only -d liveupdate.autodownload:disable

Fix Information

None

Behavior Change