Skip to content
View in the app

A better way to browse. Learn more.

hosang I.T.

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.

rev.dennis

Moderators
  • Joined

  • Last visited

Blog Entries posted by rev.dennis

  1. In Loving Memory of Chase Hosang

    Oct 11 2012 – Dec 9 2024
    The Rainbow Bridge
    There is a bridge connecting Heaven and Earth. It is called the Rainbow Bridge because of its many colors. Just this side of the Rainbow Bridge there is a land of meadows, hills and valleys with lush green grass.
    When a beloved pet dies, the pet goes to this place. There is always food and water and warm spring weather. The old, frail animals are young again. Those who are maimed are made whole again. They play all day with each other.
    There is only one thing missing. They are not with their special person who loved them on Earth. So, each day they run and play until the day comes when one suddenly stops playing and looks up! The nose twitches! The ears are up! The eyes are staring! And this one suddenly runs from the group!
    You have been seen and when you and your special friend meet, you take him or her in your arms and embrace. Your face is kissed again and again and you look once more into the eyes of your trusting pet.
    Then you cross the Rainbow Bridge together, never again to be separated.
    Chase.mp4
  2. Balance Solarwinds Traffic with F5

    Solarwinds is Windows based.  The need is to leverage F5 to load balance Solarwinds across two different data centers and this topic is to discuss how we could do this with either GTM using a WideIP or LTM or both.
    We have a main polling/web engine and have 2 additional Web Engines.  We are currently balancing over the 2 additional Web Engines with F5 BigIP-DNS (aka: GTM).  The GTM WideIP has a single pool containing the two additional Web Engines as its pool members.  Note that I don’t include the main poller/web engine in the webGui pool but leave it with as many resources as possible for its polling.
    We use the Static Persist LB method on the pool to ensure users maintain the same resolved IP address and do not resolve the other pool member.  This is necessary if you want to avoid having to re-login mid session because you ‘landed’ on the alternate pool member.  The Web Engines are not clustered and are unique entities so there is no persistence across the Web Engines.
    The Static Persist LB method means that when a DNS server resolves an IP, that same IP will be resolved indefinitely when requested by that same DNS server.
    Since the majority of our users utilize the same DNS server, we have found that we don’t get much of a balance and one of our Web Engines sits mostly idle.  We have learned that 25 concurrent sessions is suggested max for connections to any particular Web Engine.  That does not mean 25 users but 25 open tabs/sessions (at least that was my interpretation).  With better LB methodology, this will increase to 50 concurrent connections balanced over the 2 Web Engines.
    Our solution will be to create an LTM Virtual Server that listens on a vIP and proxies, via round-robin LB method, the client browsers to the Web Engines and gives a better balance as the LB would be per client (LTM method) and not per DNS server (GTM method).  The LTM method would use cookie persistence to ensure any particular session is sticky/persisted to the same Web Engine.
    With either method (GTM or LTM LB), if clients new the true IP/hostname of the Web Engines, they could still pick a specific one to connect to and would (obviously) persist to the one they choose.  Of course, your corporate FW would have to allow traffic to the Web Engines and not limit to only the LTM vIP.
    The NetScalar can be setup in a similar fashion to the LTM method.  A vIP on the NetScalar could balance client browsers with cookie persistence across any number of Web Engine hosts.
  3. Yesterday Deb Dickson was like everyone else, doing the laundry, making dinner and went to bed thinking of what needs to be done the next day to keep her family going.
    During the night Deb got a brain aneurysm which is a bulge or ballooning in a blood vessel in the brain which ruptured and the doctors declared her brain dead.
    BELOW, reply and share a fond memory you have to spread what a wonderful person she was to those that may not have known your relationship with her.
  4. Show Connections on F5

    Here are some commands you can use to troubleshoot connections on your F5 
    With the following command it will help you see how many Active connections to the F5 total and break it out by Client and Server.
    tmsh show sys performance connections Sys::Performance Connections --------------------------------------------------------------------------- Active Connections Current Average Max(since 03/02/14 08:13:41) --------------------------------------------------------------------------- Connections 11.9K 12.4K 15.0K --------------------------------------------------------------------------- Total New Connections(/sec) Current Average Max(since 03/02/14 08:13:41) --------------------------------------------------------------------------- Client Connections 648 617 770 Server Connections 599 570 729 --------------------------------------------------------------------------- HTTP Requests(/sec) Current Average Max(since 03/02/14 08:13:41) --------------------------------------------------------------------------- HTTP Requests 156 633 1.4K  
    Below are some more helpful commands
    MAX Connections per VS: 
    tmsh show sys connection | egrep -v ‘T|S’ | awk ‘{print $2}’ | sort -n | uniq -c | sort -n  MAX Connections per VIP: 
    tmsh show sys connection | egrep -v ‘T|S’ | awk ‘{print $2}’ | cut -d: -f 1 |sort -n | uniq -c | sort -n   
    If you run the following command you get a large list of connections
    tmsh show sys connection Really display 1000 connections? (y/n) y Sys::Connections 10.47.194.102:41570 10.47.44.6:8 10.47.194.102:41570 10.47.44.6:8 icmp 201 (slot/tmm: 1/2) none none 10.47.197.70:33222 10.47.37.138:8 10.47.197.70:33222 10.47.37.138:8 icmp 11 (slot/tmm: 1/2) none none 10.46.129.142:13725 10.47.32.217:443 10.47.34.22:49598 10.46.129.142:7020 tcp 3 (slot/tmm: 1/2) none none
    So what does each column represent
    [cs-client-addr:cs-client-port] [cs-server-addr:cs-server-port] [ss-client-addr:ss-client-port] [ss-server-addr:[ss-server-port] [Protocol [Age] [Slot/TMM] [PVA Acceleration] cs-client-addr:cs-client-port | cs-server-addr:cs-server-port | ss-client-addr:ss-client-port | ss-server-addr:ss-server-port Computer IP & PORT            | Virtual Server IP & PORT      | SNAT IP & PORT                | Server IP & PORT Client Side
    cs-client-addr:cs-client-port  Computer IP:Computer Port
    cs-server-addr:cs-server-port  F5 VirtualIP:F5 VirtualPort
    Server Side
    ss-client-addr:ss-client-port  F5 SNATip:F5 SNATport
    ss-server-addr:ss-server-port  F5 POOLmember:F5 POOLmemberPORT
     
    Show connections from User (10.34.168.176) to Virtual Server (10.47.196.154) 
    tmsh show sys connection cs-server-addr 10.47.196.154 cs-server-port 80 | grep 10.34.168.176  Delete Connections on Virtual Server (10.47.196.154) 
    tmsh delete sys conn cs-server-addr 10.47.196.154  
    This is what I use if I want to find the addresses that are using a certain SNAT IP address because I can’t count on how many times we get a call from our help desk that say, we need have an issue and it shows the source IP is the F5 and they provide us an IP address from the SNAT Pool. 
    EXAMPLE: They provide us SNAT address 10.46.66.57 so I will run 
    tmsh show sys connection ss-client-addr 10.46.66.57   
    You can also try and do a tcpdump but it doesn’t seem to ever work 
    tcpdump -nni 0.0 host 10.46.66.57  
     
  5. Here are some useful commands I use to troubleshoot the Viprion chassis
    Check the state of all the vCMP Guests
    [root@txsat1slbcov02-ch:/S1-green-P::Active:Standalone] config # tmsh show /vcmp health prompt ------------------------------------------------- Vcmp::Guest Prompt Name           Slot ID                     Prompt ------------------------------------------------- txsat1slbco02        1       /S1-green-P::Standby txsat1slbco12        3    /S3-yellow-P::avrd DOWN txsat1slbco14        4     /S4-red-P::INOPERATIVE txsat1slbco16        2     /S2-red-P::INOPERATIVE txsat1slbco22        3  /S3-yellow-P::INOPERATIVE txsat1slbco24        4     /S4-green-P::avrd DOWN txsat1slbco26        2  /S2-yellow-P::INOPERATIVE txsat1slbco32        3  /S3-yellow-P::INOPERATIVE txsat1slbco34        4  /S4-yellow-P::INOPERATIVE txsat1slbco36        4     /S4-red-P::INOPERATIVE txsat1slbdv04        1       /S1-green-P::Standby When you need to bring down all the vCMP Guests (helpful when you need to upgrade the Viprion chassis)
    tmsh modify vcmp guest all state configured And when the Viprion chassis is restored and you want to bring all vCMP Guests back online you can run
    tmsh modify vcmp guest all state deployed You can do individual vCMP Guests in the event you don’t want all of your Guests
    tmsh modify /vcmp guest txsat1slbco11 state configured tmsh modify /vcmp guest txsat1slbco11 state deployed  
    At times, you may need to reboot the slots
    tmsh reboot slot all more aggessive way to reboot the chassis and slots
    clsh shutdown -r now if you need to just reboot one slot you can run the following to identify what slot you are on
    bladectl -g slot Then to reboot individual slots/blades you run the following to reboot blade 1
    bladectl -b 1 -r  REF: https://devcentral.f5.com/questions/right-procedure-to-shutdown-a-viprion-system-with-vcmp
     
    Identify large files on the Viprion by running this command
    find /var/log -xdev -type f -exec du {} \; | sort -rn | head -10  
    To release files you need to restart services
    tmsh stop /sys service avrd monpd tmsh start /sys service avrd monpd tmsh start /sys service vcmpd  
    And to verify everything is back up and running
    [root@txsat1slbcov02-ch:/S1-green-P::Active:Standalone] config # tmsh show sys cluster ----------------------------------------- Sys::Cluster: default ----------------------------------------- Address                 10.46.136.190/23 Alt-Address             :: Availability            available State                   enabled Reason                  Cluster Enabled Primary Slot ID         1 Primary Selection Time  03/04/21 20:58:51   -------------------------------------------------------------------------------------------   | Sys::Cluster Members   | ID  Address        Alt-Address  Availability  State    Licensed  HA      Clusterd  Reason   -------------------------------------------------------------------------------------------   | 1   10.46.136.191  ::           available     enabled  true      active  running   Run   | 2   10.46.136.192  ::           available     enabled  true      active  running   Run   | 3   10.46.136.193  ::           available     enabled  true      active  running   Run   | 4   10.46.136.194  ::           available     enabled  true      active  running   Run  
    more to come
  6. So when a change is done on an F5 that is part of a device group (making it HA) the box will display Changes Pending until sync'd

    You can use tmsh to show the most recent changes to a device group by running the following command. You can identify the device-group by simply typing tmsh show /cm sync-status
    tmsh show cm device-group <device_group> these are the two entries to pay attention to
    CID Time (UTC)                   2019-Mar-27 10:07:21    LSS Time (UTC)                   2019-Mar-27 09:30:41 You can check logs for what changes may have been made.  Using the output from the previous procedure, search the log file for changes that occurred between 09:30:41 and 10:07:21 on March 27 2019. If the device is a standalone and not part of a pair and you know the time of the last approved change, then use that time.
    cat /var/log/audit | sed -n -e '/Mar 27 10:01:02/,$p'  
  7. I am migrating from an End Of Life hardware to a new vCMP Guest and with the migration I am deploying all the applications using JSON and AS3 (through BIGiQ).
    So we would like all the applications to be staged on the F5 in a disabled state and as we migrate each application with the team on the phone for verification, I just want to make the change in JSON and push to the F5 and disable the Virtual Server on the legacy EoL box and BOOM, live traffic on new box.
    Why disabled state?  I don't want any traffic to go to new hardware until we are ready to migrate the application.
    So in JSON format all I can figure out looking through the AS3 schema is possibly changing this one setting from true to false.  What it does is create everything but the virtual server if you go to the F5 itself.  So the partition is created (tenant) and you'll find the pool but you won't see any virtual server.

    The goal is actually to have the virtual server deployed to the F5 using JSON but it be visible and disabled.

    I "thought" if the virtual server was in a disabled state then it would not be responsive but this actually isn't true as I will demonstrate below
    So I first remove the virtual server so we start with a clean slate

    Now let's go to the command prompt on the F5 and ping the IP address of the Virtual Server (in this case its 192.168.199.22)
    [root@usfnt2slbco02:/S2-green-P::Active:In Sync] config # ping 192.168.199.22 PING 192.168.199.22 (192.168.199.22) 56(84) bytes of data. ^C --- 192.168.199.22 ping statistics --- 5 packets transmitted, 0 received, 100% packet loss, time 4000ms From above ping nothing is responding to that IP address.
     
    Now let's deploy the Virtual Server in enabled state as shown above

    Now we get a ping response as we should
    [root@usfnt2slbco02:/S2-green-P::Active:In Sync] config # ping 192.168.199.22 PING 192.168.199.22 (192.168.199.22) 56(84) bytes of data. 64 bytes from 192.168.199.22: icmp_seq=1 ttl=255 time=0.109 ms 64 bytes from 192.168.199.22: icmp_seq=2 ttl=255 time=0.226 ms 64 bytes from 192.168.199.22: icmp_seq=3 ttl=255 time=0.311 ms ^C --- 192.168.199.22 ping statistics --- 3 packets transmitted, 3 received, 0% packet loss, time 1999ms rtt min/avg/max/mdev = 0.109/0.215/0.311/0.083 ms Now click on the checkbox to the left and click disable so the screen looks like this

    So most people's thought is if its disabled then it shouldn't be responding, but it does
    [root@usfnt2slbco02:/S2-green-P::Active:In Sync] config # ping 192.168.199.22 PING 192.168.199.22 (192.168.199.22) 56(84) bytes of data. 64 bytes from 192.168.199.22: icmp_seq=1 ttl=255 time=0.201 ms 64 bytes from 192.168.199.22: icmp_seq=2 ttl=255 time=0.242 ms 64 bytes from 192.168.199.22: icmp_seq=3 ttl=255 time=0.232 ms 64 bytes from 192.168.199.22: icmp_seq=4 ttl=255 time=0.259 ms ^C --- 192.168.199.22 ping statistics --- 4 packets transmitted, 4 received, 0% packet loss, time 2998ms rtt min/avg/max/mdev = 0.201/0.233/0.259/0.026 ms The solution is to change that setting in the AS3 from
    "enable": true, to
    "enable": false, Then save and deploy and your virtual server will be gone and its no longer pingable
     
  8. If you are leveraging the BIG-IQ tool (version 7.x or newer) to import devices using a CSV there are a few things you should know.
    It would probably help to know the columns needed (note you do not include the column headers in the csv)

    So when you Save your CSV it MUST NOT be in UTF-8 mode or it will fail when you try and import it with incorrect Management IP Address which is the first column since the CSV import can not read a CSV saved in UTF-8 mode.
    Anyhow, your CSV should look something like this when your done

    When you click begin you will see a very boring box while it tries to import the devices

  9. After upgrade to 8.0 I am unable to get any stats which means Applications tab doesn't work and just kicks out an error and same thing for most everything under the Monitoring tab.
    What did I try?
    I removed the BIG-IP device and readded it with same results I removed DCD and readded it back in which took about an hour each because it would hang on ES_ service What worked?
    These steps will only affect the configuration between the Big-IQ and the DCDs, none of the Big-IP data should be affected:
    From bash on the CM:  reset-data-collection-cluster From bash on each of the DCDs:  reset-data-collection-cluster -es Re-add the DCD devices It is important that we use the -es flag on the DCDs and NOT on the CM.  This is because we want the DCDs to control the data that the CM knows about, rather than having the CM determine what data it remembers.  After completing steps 1 and 2, try adding the DCDs back to the CM.  If this doesn't resolve the issue, isn't anything more we can do to preserve the previous data and we'll need to go through these same steps without the -es flag on the DCDs.  If there is no value in retaining the historic data, we can remove the -es flag from the second step the first time.
     
  10. With the F5 BIG-IQ tool you can update the admin and root passwords for all your devices you manage or just a select few and its fast and very easy to do.
    When you manage BIG-IP device from BIG-IQ Centralized Management, it is good practice to change the default admin and root passwords on a regular basis. From BIG-IQ, you can change the passwords for several BIG-IP devices at one time.

    Note: You can change the passwords for several BIG-IP devices simultaneously only if they have the same password.     Important: The passwords for the BIG-IP devices you select must all be identical.
    On the top of the BIG-IQ GUI, click Devices tab. On the left, click PASSWORD MANAGEMENT > Change Device Passwords . Near the top of the screen, click the Create button. In the Name and Descriptions fields, type a name and optional description to help you identify this task. From the Available list, select devices and move them to the Selected list. Select an option for the Change Password setting. Provide the old and new passwords, as required. Click the Run button at the bottom of the screen.     BIG-IQ will apply the new password to all of the selected BIG-IP devices. You can view the status of this task from the Change Device Passwords screen.

    REFERENCE: https://support.f5.com/csp/article/K25546160
  11. Software Upload Error

    Trying to upload a file that got aborted previously either because of a loss of connection or navigating away from the page while uploading (it happens).
    So when you try and upload again you get an error message like this
    What is the answer?  What can you do?
    Well just ssh to the BIG-IQ CM device and navigate to /shared/images/tmp
    There you will, more than likely, find the partial image that was trying to upload. Just delete it and go back to the GUI and try again.
    AND if that doesn’t work, no worries..  just manually upload the .iso file to /shared/images and check in the GUI later to see if it shows up.
  12. So you are in BIG-IQ and for some reason or another BIG-IQ is asking for you to remove the device and add it back in to re-establish trust but wait..  you can’t because Applications are linked to that device.  Here are some steps to follow to remove an application.
    So say you are trying to remove the LTM service from a device and its saying you can’t remove the device because this application is linked to it
    t_10.47.32.9_openpagescc-dev.int.thezah.com._app So you need to find the configSetName so you can search on BIG-IQ
    restcurl /cm/global/config-sets | jq '.items[] | {configSetName,selfLink}' Once you find the ConfigSetName you can force remove it by running the following command
    restcurl /cm/global/tasks/force-delete -X POST -d '{"configSetName":"t_10.47.32.9_openpagescc-dev.int.thezah.com._app"}' Now if you have multiple to do you can cheat a little bit but its still a pain in the ass…
    setname=t_10.47.32.9_openpagescc-dev.int.thezah.com._app restcurl /cm/global/tasks/force-delete -X POST -d "{"configSetName":"${setname}"}" So when it completes and you get the next one that has an issue you just update setname=t_103841_dev1_abms_pdev3_int_thezah_com_https_app and up arrow to run the following again: restcurl /cm/global/tasks/force-delete -X POST -d “{“configSetName”:”${setname}”}”
    Did you know that every F5 has a unique code which can be found when you run the following
    cat f5-rest-device-id Sometimes its helpful to know what the UUID is for the F5 device
  13. Send BIG-IQ logs to Splunk

    Need to identify a way to send logs from BIG-IQ to Splunk so we can see failures when BIG-IQ is trying to send signature updates to the DMZ F5’s running AWAF.
    First, setting up logging was pretty easy to do
    System Tab – Audit Log Syslog Servers
    Enter NAME and IP address of syslog servers and TCP 514.
    NOTE: I tried the newer rfc5424 and got nothing in Splunk so have to leave the old school rfc3164
    Next, Found some interesting articles
    https://techdocs.f5.com/kb/en-us/products/big-iq-centralized-mgmt/manuals/product/bigiq-central-mgmt-security-5-4-0/22.html
     
  14. Authentication Issues on F5

    We upgraded to 15.1.2.1 and now we seem to have a bunch of issues authenticating using either AD or TACACS.  It requires multiple tries and then it eventually works.
    Our first attempt is to fix the F5 devices that are using AD only
    vi /etc/openldap/ldap.conf
    You have to add a new line
    Then you need to run
    tmsh list auth ldap system-auth referrals auth ldap system-auth {     referrals yes } If its yes, then change it to no by running
    tmsh modify auth ldap system-auth referrals no And confirm its set by doing another list command like the one above
    tmsh list auth ldap system-auth referrals auth ldap system-auth {     referrals no } And finally before you start testing, save the configuration
    tmsh save sys config Saving running configuration...   /config/bigip.conf   /config/bigip_base.conf   /config/bigip_script.conf   /config/bigip_user.conf   /config/partitions/Citrix/bigip.conf   /config/partitions/DNS/bigip.conf   /config/partitions/Disaster.Recovery/bigip.conf   /config/partitions/Integration/bigip.conf   /config/partitions/Messaging/bigip.conf Now do some testing of your user account that utilizes AD to see if it works.
     
  15. F5 LTM and tcp timeouts

    I got this request that stated
    Increase the tcp timeout client  to 7 mins.
    This is out of the norm for requests so I figured I would share my findings in the event anyone else might run into this same thing.
    So if you don't do anything and just apply the standard tcp protocol profile the timeout is 5 minutes.  Do I trust that the user knows that they need exactly 7 minutes for a timeout?  No so I utilize an existing tcp protocol profile called tcp.15.minutes which just increases the timeout to 900 seconds (or 15min)

    Now you apply it to your Virtual Server..  if its not standard you probably won't be able to apply the profile

    Set persistence timeout to slightly higher than the tcp timeout (if tcp timeout = 15 min, set LB persistence timeout to 20 minutes). This will ensure that user requests are pinned to the same app server for the duration of the session.
  16. It's quite difficult to troubleshoot traffic issues when a SNAT is assigned from a pool since its random and changes every time a new connection is established.
    Below are some hints on how to IDENTIFY what SNAT is assigned to the traffic using tmsh show sys connection
    SNAT stands for Source Network Address Translation.
    IDENTIFY what SNAT is assigned to the traffic from user source IP 74.32.5.21 (typically you don't want to specify source port since its random generated)
    tmsh show sys connection cs-client-addr 74.32.5.21 IDENTIFY what SNAT is assigned to the traffic on virtual server 10.47.196.154 on port 80
    tmsh show sys connection cs-server-addr 10.47.196.154 cs-server-port 80 IDENTIFY what SNAT is assigned to traffic destined for pool member 10.40.144.18 over port 443
    tmsh show sys connection ss-server-addr 10.40.144.18 ss-server-port 443 Explaination of columns when running tmsh show sys connection
    cs-client-addr:cs-client-port | cs-server-addr:cs-server-port | ss-client-addr:ss-client-port | ss-server-addr:ss-server-port Computer IP & PORT            | Virtual Server IP & PORT      | SNAT IP & PORT                | Server IP & PORT
     
  17. Health Monitors

    So Health Monitors are a big deal to ensure your pool members are up and working.  Obviously a health monitor tells whether a pool member is up or down and when its down the pool won’t send any traffic to that pool member.
    Now you can assign health monitors two different ways.  The right way and the wrong way but sometimes the wrong way is the right way but not the majority of the time…  its more of a custom thing.  Let me explain further
    Example of a pool health monitor
    ltm pool /Integration/pool.cs-inspire-batch-cap.int.thezahcom.ssh {     load-balancing-mode least-connections-member     members {         /Integration/10.45.89.242:22 {             address 10.45.89.242             session monitor-enabled             state up         }         /Integration/10.45.89.243:22 {             address 10.45.89.243             session monitor-enabled             state up         }     }     monitor monitor_22     partition Integration } Here is an example of the “custom” or incorrect way
    ltm pool /Integration/pool.iwarranty-iwnacap.int.thezah.com.22 {     members {         /Integration/sat1svmap140:22 {             address 10.45.88.103             monitor tcp             session monitor-enabled             state down         }         /Integration/sat1svmap141:22 {             address 10.45.88.106             monitor tcp             session monitor-enabled             state down         }         /Integration/sat1svmap142:22 {             address 10.45.88.109             monitor tcp             session monitor-enabled             state down         }         /Integration/sat1svmap143:22 {             address 10.45.88.112             monitor tcp             session monitor-enabled             state down         }     }     monitor monitor_22     partition Integration }  Can you see the difference?  Unlike the first one, this has a monitor set at the pool level and then they trump that pool monitor with a health monitor set on each pool member.  In this case you never ever want a tcp health monitor on ssh box…  it will cause lots and lots of errors.
    So to remove those monitors assigned to each pool member you would run a command like this
    tmsh modify ltm pool /Integration/pool.iwarranty-iwnacap.int.thezah.com.22 members modify { /Integration/sat1svmap140:22 /Integration/sat1svmap141:22 /Integration/sat1svmap142:22 /Integration/sat1svmap143:22 { monitor default } }
  18. this will be the description of the different modes
     
     
    Topology Load Balancing Mode
    Topology is a proximity based load balancing mode that allows you to direct traffic by defining topology records and selecting the Topology load-balancing mode for the wide IP or pool. The Topology mode bases the distribution of requests on the topology records and the weighted scores configured for each record. The topology records direct DNS queries to the closest virtual server, based on geographical information. The BIG-IP DNS system is designed to support an unlimited number of topology records. The only limit is the amount of memory available to the gtmd process.
    When planning topology load balancing, you should consider the following factor:
    The BIG-IP DNS system looks up topology records in the order they appear in the Configuration utility and the configuration file. As a result, you should place more-specific topology records toward the top of the topology statement and less-specific records toward the end of the topology statement. You can change the order of existing topology records by clicking Change Order on the Topology Records page. Topology record format
    Topology records are stored in the bigip_gtm.conf file on the BIG-IP DNS system and are used to match a Local Domain Name System (LDNS) request with a specific destination object. A topology record has the following fields: an LDNS request source statement, a destination statement, an operator, and a weight.
    LDNS Request Source.
    The LDNS request source statement defines the origin of a name resolution request. For example, the topology statement can be defined to direct an LDNS request from a particular source to a desired destination. The LDNS source can be any of the following elements: Continent Country ISP IP subnet (CIDR format) Region (user-defined) State Geolocation ISP (12.0.0 and later) Destination
    A destination statement defines the resource to which the BIG-IP DNS system directs the incoming DNS request. For example, the topology statement can be defined to direct an LDNS request that originates from a particular source to any of the following destination elements: Continent Country Data center * ISP IP subnet (CDIR format) Pool of virtual servers Region (User-defined) State Geolocation ISP (12.0.0 and later) Operator
    An operator statement indicates whether the name resolution request matches the statement. You can select an operator for both a request source and a destination statement. For example, an operator statement can be one of the following:
    is is not Weight (score)
    The weight specifies the score that will be given to a destination object which matches the topology record. In the event that a name resolution request matches more than one topology record, the BIG-IP DNS system uses the destination object with the highest weight to determine which statement it uses to load balance the request.
    Understanding topology records matching modes and the importance of order
    The BIG-IP DNS system orders topology records based on how the records are created and whether Longest Match is enabled. Topology records are passed through in order looking for the first matching record for each possible destination. Each matching record is then evaluated to determine which destination has the highest weight. This means that if a pool contains four pool members there may be up to four matching records (one for each possible destination), at which point the weight of each is evaluated to determine which record to use.
    Longest Match (enabled)
    The Longest Match option, which is enabled by default, instructs the BIG-IP DNS system to use the topology statement that most completely matches the source IP address of the name resolution request.
    The Longest Match option ensures that the BIG-IP DNS system processes topology records as fast as possible. The system achieves this by automatically sorting the topology records so that the records that more specifically match the LDNS IP appear first in the topology list. When the Longest Match option is enabled, the BIG-IP DNS system evaluates all records in the topology statement and uses the record that most completely matches the source IP address of the name resolution request. In the event that a name resolution request matches more than one topology record, the BIG-IP DNS system uses the destination object with the highest weight (score) to determine which statement it uses to load balance the request.
    Longest Match (disabled)
    If the Longest Match option is not selected, the topology records can be manually ordered, but the method used to evaluate the topology records when choosing a match does not change.
     
     
  19. In the environment I work in we have Infobox being the master, serving all records and is the owner of the domains but we have a secondary server(s) which are F5 GTMs or F5 BIG DNS, that hold a copy of the records but you must create the domain on the GTM manually using a command like this
    tmsh create ltm dns zone dev.hosangit.com dns-express-server dns-server-0 dns-express-notify-tsig-verify no Now you can verify it got created by running the command
    tmsh list ltm dns zone dev.hosangit.com It's also a good idea to check the status of the new zone to see its Availability, State and Reason by running the show command like this
    tmsh show ltm dns zone dev.hosangit.com Of course if you determine that creating the zone was a mistake you can always delete it
    tmsh delete ltm dns zone dev.hosangit.com Now if you made a mistake and queried the entry and then you are trying to fix it but it just keeps responding with the mistake then more than likely its cached and you'll need to delete the cache by running
    tmsh delete ltm dns cache records rrset cache non-wideip-transparent-cache  
  20. Approximate Time: 18-22 minutes
    With music, entrance, and exit: 27-35 minutes
     
    WELCOME
    On behalf of (Groom)____________ and (Bride)______________, I would like to thank all of you for being here to share in their special day.  This moment in time is truly a cause for joyous celebration, for we are here to witness not only the beginning of a new marriage, but also the beginning of a new family.  Today, (Grooms Full Name)____________________ and (Bride's Full Name)____________________ will be united in marriage, and (Children)_____________________________ will be entering this new family to make it complete.
    CONSENT
    So, (Groom)__________________, (Bride)_____________________, and (Children)__________________________________________, are all of you ready to make a commitment to this marriage and to this new family that is beginning today?
    (Groom, Bride and children answer): Yes, we are.
    Who presents (Bride)__________________ to be married to (Groom)_________________________?
    (The Escort shall say): Her Mother and I or I do or We do or Her family or other.
    (Bride gives bouquet to Maid of Honor)
    ADDRESS AND READINGS
    Today, a new chapter is being written in your lives.  We could call the title of this chapter, "New Beginnings."  You are beginning new relationships to your family, to your friends, and to each other.  you are beginning a new life together; you are beginning a new family; you are beginning a new home.  As you build this new home together, remember there are three important ingredients you will need to add to the recipe we call "Marriage and Family."
    The first ingredient is TIME.  It is going to take time for your home to be everything you want it to be.  It will take time to blend your lives together into a new family.  See your new family as beautiful rainbow with each individual person having a distinct color, each one providing a different shade to make the rainbow complete.  But remember, it takes both the sun and the rain to make a rainbow, and so it will be in your relationships with one another.  The rain may come and dampen things at times, but rain is necessary to make things grow.  Soon, the sun will shine and bring forth the many different colored facets of your lives.  In time, you will begin to see what a precious gift you have in each other--what a beautiful rainbow this family will become.  So, let TIME take its time.
    The second ingredient is TALK. Communication is vitally important in your relationship as a family.  We live in an age of telecommunication with cell phones, fax machines, and the Internet filling our lives with "better ways" to communicate.  yet, with all this incredible technology, one fo the greatest needs of a family is just simply to talk with each other.  each day, set aside some uninterrupted time with the television and the phones turned off and just sit around the table and talk.  Talk about your interests, your needs, your problems, your solutions, your hopes, and your dreams.  By talking and listening, you will communicate something far more important than mere words.  You will communicate you care about each other.  So take time to talk and take time to listen, not only to each other, but to God, as well.  For it has been said, "the family that prays together, stays together."
    The third ingredient is TEAMWORK.  Do things together.  Work together, play together, eat together, laugh together, cry together, struggle together, and pray together.  You are in this together.  No one person is more or less important than the other.  You are a team and everyone needs to participate in the game of life.  Yes, there will be some strikeouts and a few foul balls now and then.  That's part of the game.  But there also will be some hits, a few home runs, and maybe even a grand slam or two.  These things only happen when everyone plays 100 percent.  In a baseball game, whenever a runner gets on base, the whole purpose is to bring him around to home plate.  That is what you are doing; because you are a team, you are bringing each other home.
    TIME...TALK...TEAMWORK... If you mix these three ingredients into the daily recipe of life, then your marriage and your family will truly blend into all you want it to be.  Finally, I want to share with you an old tried and true family recipe for making a happy home.  It is called, "The Happy Home Recipe".
    Happy Home Recipe
    Start with 1 heaping house full of Humans.
    Add 1 cup each; Commitment, Cooperation, Courage, Courtesy, Consideration, and Contentment.
    Allow 2 cups of open and honest Communication to simmer on low heat, but never let it come to a full boil.
    Pour in 1 quart Milk of Human Kindness, along with 1 can Sweetened Condensed Confidence.
    Add 3 tablespoons pur extract of "I am Sorry" and mix well with a generous portion of Forgiveness, Patience, and Understanding.
    Throw in a mouth full of Praise, Encouragement, and Support, and season with a hand full of Loyalty and Friendship.
    Stir in 1 big barrel of Laughter with just a pinch of Teasing, and sprinkle with a pocket full of Hopes and Dreams.
    Mix 1 gallon of Faith in God and Faith in each other with one heart full of Gratitude for countless blessings.
    Continue to fill kettle until overflowing with Joy and Peace.
    Carefully blend all the ingredients together into this big Pot of People and cook very slowly.
    Remove any specks of Temper, Jealousy, or Criticism, and never serve with a Hot Tongue or a Cold Shoulder.
    Sweeten well with a heapin' helpin' of Love and Tenderness, and always keep warm with a steady flame of Devotion.
    Remember to savor the flavor of every moment, and if preserved with Care, this Happy Home will last a lifetime. (Reading #10)
    WEDDING VOWS
    (The Officiant shall say): (Groom)__________________ would like to share his vows with (Bride)__________________. 
    I love you (Bride)__________________, and I love (Children)__________________ [as my very own]. Today, as we become husband and wife, we also will become a family and begin a new life together. I promise to be a faithful husband and loving father, and I will be there for you and for the children always. No matter what circumstances life may bring, with God's help, we will face them together as a family. I commit myself to each of you from this day forward and forevermore. (Wedding Vow #9) 
    (The Officiant shall say): (Bride)__________________ would like to share her vows with (Groom)__________________. 
    I love you (Groom)__________________, and I love (Children)__________________ [as my very own]. Today, as we become husband and wife, we also will become a family and begin a new life together. I promise to be a faithful wife and loving mother, and I will be there for you and for the children always. No matter what circumstances life may bring, with God's help, we will face them together as a family. I commit myself to each of you from this day forward and forevermore. (Wedding Vow #9)
    NOTE: These wedding vows are best if read rather than repeated. 
    EXPLANATION OF THE RINGS
    You are about to present a ring to each other. The wedding ring, a complete circle, is a symbol of the completeness a husband and wife find in a marriage relationship. The ring has no beginning and no end, just as true love is never-ending. The ring also is made of precious metals and precious gems, just as true love is a precious treasure. As you place the wedding ring on each other's hand, may it not only remind you of the endless love you possess for one another, but may it also be a reminder of the precious gift God has give you to make you complete. 
    RING EXCHANGE VOWS
    (The Officiant shall say): May I have the token of (Groom's)____________ love for (Bride)____________? (Officiant receives ring from Best Man. Groom places ring on Bride's finger.) 
    (The Officiant shall then say): (Groom)____________, please repeat after me. 
    (Bride)____________, as I place this ring on your finger, / may it always remind you / of my never-ending love, / and may it always remind me / of the precious treasure I have in you. / Wear this ring with joy, for your love has made me complete. (Ring Vow #4)  
    (The Officiant shall say): May I have the token of (Bride's)____________ love for (Groom)____________? (Officiant receives ring from Maid of Honor. Bride places ring on Groom's finger.) 
    (The Officiant shall then say): (Bride)____________, please repeat after me. 
    (Groom)____________, as I place this ring on your finger, / may it always remind you / of my never-ending love, / and may it always remind me / of the precious treasure I have in you. / Wear this ring with joy, for your love has made me complete. (Ring Vow #4) 
    CELEBRATION OF THE NEW FAMILY
    When a couple marries, it is not just the joining of two lives together, it is the coming together of families, as well. This is especially true today. For as (Groom)__________________ and (Bride)__________________ become husband and wife, they also are joined now by (Children)__________________ to become a family. At this time, we recognize these children [this child] and acknowledge their [his/her] significance on this wedding day. 
    COMMITMENT TO THE CHILDREN
    (The children shall come forward and form a circle with the Bride and Groom. They may all join hands as the Bride and Groom read the following vows to the children).
    Today, as we become husband and wife, we welcome you, (Children)__________________ into our new family. We recognize you are a precious gift from God. We promise to be there for you always, to comfort you and care for you, to protect you and provide for you, to guide you and listen to you, and most of all, to love you with all our hearts all the days of our lives. 
    PRESENTATION OF GIFTS
    Just as (Groom)__________________ and (Bride)__________________ gave each other rings as symbols of their love and commitment to you. (At this time, the Bride and Groom present their gifts, such as pins or rings, medals or medallions, and give each child a hug and a kiss). 
    If the gift is the Family Medallion, the Officiant will explain the significance of its three conjoined circles by saying:
    The Family Medallion is made up of three intertwining circles, two of which symbolize the union of this man and woman in marriage. The third circle represents the joining of children to this union, making it complete as we celebrate the new family created here today. (To order the Family Medallion, go to www.lovenotesweddings.com)
    LIGHTING OF THE FAMILY UNITY CANDLE
    OPTION A
    The Groom's children jointly light the Groom's candle and the Bride's children jointly light the Bride's candle. Then the Bride and Groom take their respective candles and jointly light they Unity Candle. 
    OPTION B
    The Bride and Groom light the Unity Candle first with their individual candles, then take the Unity Candle and together light each child's candle from that flame. 
    OPTION  C
    The Bride and Groom light each child's candle with their individual candles, and together they all light the Unity Candle as a family.
    You will need candles for the Bride, Groom, and each child represented, in addition to the Unity Candle. 
    The lighting of the Family Unity Candle symbolizes the blending together of two homes into one home, two families into one family, (number of family members) ______________ hearts into one heart, and many colors into one rainbow. Just as you light your candles together, so may your love for each other light up your lives, both individually and together as a family. 
    WEDDING PRAYER/BLESSING
    May God bless your [this] marriage and family as you [they] create a new home together. A family is a circle of strength and love. With every birth and every union, the circle grows. May every joy shared also add love to the circle, and may every crisis faced together make this circle even stronger. May your [this] family become like a beautiful rainbows as each color of your [their] lives is carefully blended together with both the showers and the sunshine of God's love. Amen. (Blessing #11)
    PRONOUNCEMENT
    (Groom)__________________ and (Bride)__________________, because you have committed yourselves to each other and to these children, and because you have proclaimed your love for each other and for these children by the giving and receiving of rings and these gifts, I now pronounce you husband and wife and family. 
    KISS
    (The Officiant shall say): (Groom)__________________, you may kiss your Bride. 
    (Bride and Groom kiss).
    (Bride receives bouquet from Maid of Honor.)
    PRESENTATION
    (The Officiant shall say): Ladies and Gentlemen, it is my privilege to introduce to you for the very first time, (Mr and Mrs.)_______________ and family.
    or
    It is my pleasure to present to you (Groom)______________ and (Bride)________________ in their new relationship as husband and wife, and their son / daughter / children ___________________.
    or
    May I present to you the _______________________ family.
  21. Approximate Time: 17-20 minutes
    With music, entrance, and exit: 25-30 minutes
     
    WELCOME
    What a joy it is to gather here today to celebrate the rebirth of love in the hearts of two very special people, (Groom's full name) _________________________ and (Bride's full name) _________________________. As your family and friends, we recognize that this love was sent as a precious gift through the person who is standing before you now. The love that you have found in each other has brought sunshine back into your lives once again. For you are to each other a healer of the heart, a mender of the emotions, and a source of solitude for the spirit. 
    CONSENT
    (Groom) _______________ and (Bride) _______________, a new life lies before you. Are you ready to walk down this path as husband and wife, and live together in the covenant of faith, hope, and love? 
    (Both answer) Yes, we are.  
    Who presents (Bride) _______________ to be married to (Groom) _______________?
    (The Escort shall say): Her Mother and I or I do or We do or Her family or other.
    (Bride gives bouquet to Maid of Honor.)
    ADDRESS AND READINGS
    There is an old love song that captures the spirit of this wedding today. It goes like this:
    The Second Time Around
    Love is lovelier the second time around. 
    Just wonderful with both feet on the ground. 
    It's that second time you hear your love song sung. 
    Makes you think, perhaps, that love, like youth, is wasted on the young. 
    Love's more comfortable the second time you fall. 
    Like a friendly home, the second time you call. 
    Who can say what brought us to this miracle we've found? 
    There are those who'll bet love comes but once, and yet, I'm oh so glad we met
    THE SECOND TIME AROUND.
    Aren't you glad God gives us a second chance? He does not want us to give up on this institution of marriage just because circumstances took love in a direction we did not anticipate. When he designed marriage, God had a special plan in mind that He wants us to embrace. 
    The Institution of Marriage 
    The institution of marriage was begun that a man and a woman might learn how to love and, in loving, know joy; 
    that a man and a woman might learn how to share pain and loneliness and, in sharing, know strength;
    that a man and a woman might learn how to give and, in giving, know communion. 
    The institution of marriage was begun that a man and a woman might, through their joy, their strength, and their communion, become creators of life itself. 
    Marriage is a high and holy state, to be built of the stuff of daily life. 
    Men and women are not angels, nor are they gods. Love can become hatred; joy, sorrow; marriage, divorce.
    But human beings are not condemned to failure. Love can grown even in a real world. The wounds of sorrow can be healed, and new life built on the learnings of the old. 
    This is the reason for our gathering today: to renew our faith in the strength of hope and the power of love. (Reading #1)
     
    Today, (Groom) _______________ and (Bride) _______________, you are beginning a new journey with the one person who means the most to you, in this whole world. Remember that, to the world, you are but one person, but to one person...you are the world. And so, I would like to share with you three ways of looking at life as you walk through this world together. 
    First, I want to encourage you to look at life through the eyes of FAITH. It wasn't fate that brought you to this moment, it was faith---faith that you could experience again. For when you chose to love again, you chose to live again. So today, we not only celebrate your love, but life itself. It is through faith that we are able to wipe out the old canvases of our lives and allow God, with His amazingly artistic talent, to fill them with new color, harmony, and beauty. Sometimes our lives are like a desert, seemingly void of all life; but given a little rainfall, life springs into existence. At one time, your lives may have been a desert, but through faith in God, in life, in love, and in each other, your lives have blossomed into something beautiful. So keep on looking at life through the eyes of FAITH. 
    Second, look at life through the eyes of HOPE. Never has hope been so alive and so strong as it is today. As you hold each other's hand right now, you are holding onto hope. And what is hope? Hope is a wish your heart makes for all your dreams to come true. This person standing before you is your "dream come true". Even when you throught love would not ever come your way again, you still dreamed of a special someone with whom to share your life. When you first met the one you are about to marry today, hope began to live again in your heart. It was this hope that enabled you to see the possibilities of a new beginning and a new life. Hope says to never give up on your dreams, for your "dream come true" may be just around the corner. So, continue to hold onto HOPE. 
    Third, look at life through the eyes of LOVE. You have learned a lot about love. You have even learned that sometimes love hurts. It is the painful side of love that often causes us to withdraw and retreat inside ourselves. Then we begin to build walls around our hearts. When love approaches the door to our hearts, we shut the door and keep love out. When we keep love out, we eep life out. We cease to live life the way it was meant to be lived because we haven't experienced love the way we were meant to be loved. Now, all that has changed. You both were willing to take the risk because you believed in the power of love. You chose a gift once opened and made it new again. And as a result, you rediscovered the greatest gift in life---the gift of unconditional LOVE. The best description of unconditional love ever written says this:
    "Love is patient and kind, never jealous or envious, never boastful or proud, never haughty or selfish or rude. Love does not demand its own way nor is it irritable or touchy. It does not hold grudges and will hardly ever notice when others do it wrong. It is never glad about injustice, but rejoices whenever truth wins out. This kind of love knows no boundaries to its tolerance, no end to its trust, no fading of its hope, no limit to its endurance. It can outlast anything. Love is, the one thing that still stands when all else has failed. These three things remain: faith, hope, and love...but the greatest of these is love." 1 Corinthians 13:4-7, 13 (Reading #12, Version 2---Contemporary)
    WEDDING VOWS
    (Bride/Groom) _______________/_______________, (Option A)God has given us a second chance at happiness. (Option B) We have been given a second chance at happiness. Before I met you, I was only half a person with an emptiness in my heart. But your love has filled that void completely, and I am whole again. Today is the first day of the rest of our lives. As we begin a new life together, I promise to give my future to you in faith, my heart to you in hope, and my life to you in love. (Wedding Vow #8)
    NOTE: These wedding vows are best if read rather than repeated. 
    EXPLANATION OF THE RINGS
    I will now ask you to seal the vows you shared with each other by the giving and receiving of rings. The perfect circle of the ring symbolizes eternity. The precious metal is a symbol of all that is pure. it came from the ground as rough ore that had to be tried by a refiner's fire in order to melt away all the impurities. May these rings symbolize not only your eternal love for each other, but also the melting away of the past. So now, all that remains is the pure essence of your love. 
    RING EXCHANGE VOWS
    (The Officiant shall say): May I have the token of (Groom's) _______________ love for (Bride) _______________? (Officiant receives ring from Best Man. Groom places ring on Bride's finger.)
    (The Officiant shall then say): (Groom) _______________, please repeat after me. 
    (Bride) _______________, I give you this ring / as a symbol of my love for you. / Just as this band encircles your finger, / may you always feel encircled by my love. (Ring Vow #7)  
    (The Officiant shall say): May I have the token of (Bride's) _______________ love for (Groom) _______________? (Officiant receives ring from Maid of Honor. Bride places ring on Groom's finger.)
    (The Officiant shall then say): (Bride) _______________, please repeat after me. 
    (Groom) _______________, I give you this ring / as a symbol of my love for you. / Just as this band encircles your finger, / may you always feel encircled by my love. (Ring Vow #7) 
    LIGHTING OF THE UNITY CANDLE
    The lighting of the Unity Candle is a reminder that the fires of love have once again been rekindled in your hearts. Sometimes our inner light goes out, but it is blown into flame again by an encounter with another human being. Each of us owes the deepest debt of gratitude to those who have rekindled this inner light. Because the two of you are the "rekindler" of each other's flame, today you will join your inner lights into one brighter light. May the light of your lives grow and glow so others may see the flame and feel the warmth of your love. 
    WEDDING PRAYER/BLESSING
    May your marriage be blessed with faith for the future. May your hearts be filled with the happiness of hope. May your lives be enlightened with an everlasting love. May God grant you a new beginning as He opens the door to life's deepest and richest experiences. May the life you build together be a lasting testimony that a second chance is for those who never give up believing in the power of FAITH, HOPE, and LOVE. (Blessing #10)
    PRONOUNCEMENT
    (Groom) _______________ and (Bride) _______________, as you exchanged vows with one another, we witnessed the miracle of faith. As you gave and received these rings, we witnessed the miracle of hope. As you seal this commitment with a kiss, we will witness the miracle of love. Sharing with you in these three miracles gives me great joy as I now pronounce you husband and wife. 
    KISS
    (The Officiant shall say): (Groom) _______________, you may kiss your Bride. (Bride and Groom kiss.) (Bride receives bouquet from Maid of Honor.)
    PRESENTATION
    (The Officiant shall say): Ladies and Gentlemen, it is my privilege to introduce to you for the very first time, (Mr and Mrs.) ___________________.
  22. Approximate Time: 8-10 minutes
    With music, entrance, and exit: 15-20 minutes
    WELCOME
    We are here today to celebrate the miracle of love. (Groom's full name) ____________________ and (Bride's full name) _________________________ have found that miraccle in each other and now desire to share their love all the days of their lives. 
    CONSENT
    Are both of you willing to give your hand to the one whose heart you hold? 
    (Both answer): Yes, we are. 
    Who presents (Bride) _______________ to be married to (Groom) _______________?
    (The Escort shall say): Her Mother and I or I do or We do or Her family or other. 
    (Bride gives bouquet to Maid of Honor.)
    ADDRESS AND READINGS
    Today you are giving yourselves to one another to love and to live. Your lives are being woven together, and in time, they will intertwine in such a way that you truly will become one in heart, mind, and soul. Listen to these words that reflect this kind of love between a man and a woman. 
    When a Man and a Woman Are in Love
    When a man and a woman are in love, His life lies with hers and her life lies within his.
    Each lives as an individual, yet they also live for one another. 
    Each strives for independent goals, but they also work together to achieve their dreams. 
    When a man and a woman are in love, they will give to one another what they need to survive and help fulfill each other's wants. 
    They will turn one another's disappointment into satisfaction. 
    They will turn one another's frustration into contentment. 
    They will work as a mirror, reflecting to each other their strengths and weaknesses. 
    They will work together to alleviate the emotional walls that may separate them.
    They will work together to build a better understanding of one another. 
    They will learn to lean on each other, but not so much as to be a burden on the other. 
    They will learn to reach out to one another, but not so much as to suffocate the other. 
    They will learn when it is time to speak and when it is time to listen. 
    They will be there to comfort each other in times of sorrow. 
    They will be there to celebrate together in times of happiness. 
     They will be one another's friend, guiding each other to the happiness that life holds. 
    They will be one another's companion, facing together the challenges that life may present. 
    When a man and a woman are in love, his life lies within hers and her life lies within his. 
    Together they will love one another for the rest of their lives and forever. (Reading #10)
     
    (Groom) _______________ and (Bride) _______________, may this kind of love always help you keep the promises you are about to make here today.
    WEDDING VOWS
    (Bride/Groom) _______________/_______________, my promise to you is but a simple one. I will love you today and everyday that follows until the end of time. With the passing of every minute, my love grows stronger and my devotion grows deeper. I will love and cherish you until my eyes can no longer see your beauty, my ears can no longer hear your loving words, and my hands can no longer feel your tender caress. From this moment until my dying breath, you are my love-----you are my life. (Wedding Vow #10) 
    NOTE: These wedding vows are best if read rather than repeated. 
    EXPLANATION OF THE RINGS
    The wedding ring is the outward and visible sign of an inward and spiritual bond that unites two loyal hearts in endless love. May these rings always remind you that it was love that brought you together, and it is love that will keep you together through all the seasons of your lives. 
    RING EXCHANGE VOWS
    (The Officiant shall say): May I have the token of (Groom's) _______________ love for (Bride) _______________? (Officiant receives ring from Best Man. Groom places ring on Bride's finger.) 
    (The Officiant shall say): (Groom) _______________, please repeat after me. 
    (Bride) _______________, this ring is the token of my love. / I marry you with this ring, / with all that I have and all that I am. (Ring Vow #1a). 
    (The Officiant shall say): (Bride) _______________, please repeat after me.  
    (Groom) _______________, I will forever wear this ring / as the sign of my commitment / and the desire of my heart. (Ring Vow #1b). 
    (The Officiant shall say): May I have the token of (Bride's) _______________ love for (Groom) _______________? (Officiant receives ring from Maid of Honor. Bride places ring on Groom's finger.) 
    (The Officiant shall say): (Bride) _______________, please repeat after me. 
    (Groom) _______________, this ring is the token of my love. / I marry you with this ring, / with all that I have and all that I am. (Ring Vow #1a). 
    (The Officiant shall say): (Groom) _______________, please repeat after me.  
    (Bride) _______________, I will forever wear this ring / as the sign of my commitment / and the desire of my heart. (Ring Vow #1b). 
    LIGHTING OF THE UNITY CANDLE
    The lighting of the Unity Candle symbolizes the joining together of your two hands, your two hearts and your two lives into one. From this moment on, the light of your love burns jointly as you walk down life's pathway together. May the path of life become brighter as the flame of your love grows stronger. 
    WEDDING PRAYER/BLESSING
    May God bless you with Hope enough to keep sunshine in your love, and Fear enough to keep you holding hands in the dark. May God bless you with Unity enough to eep your roots entwined, and Separation enough to keep you reaching for each other. May God bless you with Harmony enough to keep romance in your song, and Discor enough to keep you tuning your love so it becomes sweet music to all who may hear it. (Blessing #3)
    PRONOUNCEMENT
    (Groom) _______________ and (Bride) _______________, now that you have shared with each other these words of love and commitment, and we have witnessed the expression of your love as you have given each other these rings, and you have joined your hands and hearts before your family and friends, it is with great joy that I pronounce you husband and wife. 
    KISS
    (The Officiant shall say): (Groom) _______________, you may kiss your Bride. (Bride and Groom kiss.) (Bride receives bouquet from Maid of Honor.)
    PRESENTATION
    (The Officiant shall say): Ladies and Gentlemen, it is my privilege to introduce to you for the very first time, (Mr. and Mrs.) ________________________.

Account

Navigation

Search

Search

Configure browser push notifications

Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.