How to: Work with Access in a high availability environment

Overview

A high availability (HA) deployment consists of two BIG-IP Next systems synchronized with the same configuration: one system actively processes traffic while the other remains in standby mode until needed. The goal of such redundant pairing is to provide you with seamless, uninterrupted service in the event of the failure of the active system. If the active system is taken offline or something occurs to prevent it from processing traffic, the standby system immediately takes over.

Working with Access in HA

A floating IP address associated with application traffic helps achieve automatic failover between an active and standby HA pair. When working with Access in an HA environment, use the floating management IP address to access endpoints. For example:

  • To configure an Access policy, use the floating IP address to make a PUT request to the /access-policies endpoint.

    PUT https://{{bigip_next_mgmt_floating_ip}}:{{bigip_next_mgmt_port}}/api/v1/access-policies
    
  • To get the status of all jobs, use the floating IP address to make a GET request to the /jobs endpoint.

    GET https://{{bigip_next_mgmt_floating_ip}}:{{bigip_next_mgmt_port}}/api/v1/jobs
    
  • To retrieve information for all active sessions, use the floating IP address to make a GET request to the /access-sessions endpoint.

    GET https://{{bigip_next_mgmt_floating_ip}}:{{bigip_next_mgmt_port}}/api/v1/state/access-sessions
    

Note: The failover process does not run if the f5-access-apmd Pod restarts or is rebooted for some reason. For details on the BIG-IP Next Access components and Pods, refer to Access: Troubleshooting FAQs.

Error Messages

Error Message: Standby cluster member does not process requests; use the cluster VIP

In a high-availability environment, when attempting to access APIs using the standby IP address, you get the following error message:

{
    "_errors": [
        {
            "id": "3e22283d-5dc8-4ce6-a0b6-4961dd0f1203",
            "code": "13158-00326",
            "title": "",
            "detail": "Standby cluster member does not process requests; use the cluster VIP.",
            "status": "421",
            "_links": {
                "about": "https://clouddocs.f5.com/api/mbip/errors/13158-00326"
            }
        }
    ]
}

Resolution

Use the floating management IP address to access endpoints.