Interfaces

Captured 2026-08-03 from one CE of this deployment. sitecli/capture-manifest.json records which node, and scripts/capture-sitecli.sh --check re-verifies the command surface against a live CE.

These report the kernel’s view. The Argo data plane keeps its own, visible through vif, and the two can disagree.

ip

Takes an ip subcommand. addr is the common one; route, link and neigh also work.

{"command":["ip","addr"]}

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
2: a-i-eth0: <BROADCAST,MULTICAST,ALLMULTI,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
    link/ether 60:45:bd:eb:3f:f2 brd ff:ff:ff:ff:ff:ff
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
    link/ether 60:45:bd:eb:38:ea brd ff:ff:ff:ff:ff:ff
    inet 10.0.2.4/26 brd 10.0.2.63 scope global noprefixroute eth1
       valid_lft forever preferred_lft forever
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
    link/ether 60:45:bd:eb:3d:f3 brd ff:ff:ff:ff:ff:ff
    inet 10.0.3.4/26 brd 10.0.3.63 scope global noprefixroute eth2
       valid_lft forever preferred_lft forever
    inet6 fe80::55af:2cd4:23a1:7e06/64 scope link noprefixroute
       valid_lft forever preferred_lft forever
5: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default
    link/ether 62:61:2b:33:cd:42 brd ff:ff:ff:ff:ff:ff
    inet 100.64.255.1/29 brd 100.64.255.7 scope global docker0
       valid_lft forever preferred_lft forever
10: tap_eth0: <BROADCAST,MULTICAST,ALLMULTI,UP,LOWER_UP> mtu 1500 qdisc multiq state UNKNOWN group default qlen 1000
    link/ether 60:45:bd:eb:3f:f2 brd ff:ff:ff:ff:ff:ff
11: vhost0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UNKNOWN group default qlen 1000
    link/ether 60:45:bd:eb:3f:f2 brd ff:ff:ff:ff:ff:ff
    inet 10.0.1.4/26 brd 10.0.1.63 scope global noprefixroute vhost0
       valid_lft forever preferred_lft forever
13: vethfrr0@if12: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether 02:01:02:03:04:05 brd ff:ff:ff:ff:ff:ff link-netns frrns
15: argo-envoy-0@if14: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1520 qdisc noqueue state UP group default qlen 1000
    link/ether 00:00:5e:00:01:00 brd ff:ff:ff:ff:ff:ff link-netns envoy-ns
17: host-envoy-0@if16: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether ee:95:ea:b5:8c:2a brd ff:ff:ff:ff:ff:ff link-netns envoy-ns
    inet 169.254.100.1/30 scope global host-envoy-0
       valid_lft forever preferred_lft forever
18: xc-br0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether aa:db:2f:e1:15:2c brd ff:ff:ff:ff:ff:ff
19: argo-end@xc-br0-end: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether 76:e0:23:f6:48:8b brd ff:ff:ff:ff:ff:ff
20: xc-br0-end@argo-end: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master xc-br0 state UP group default qlen 1000
    link/ether aa:db:2f:e1:15:2c brd ff:ff:ff:ff:ff:ff
22: linkquality0@if21: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 590 qdisc noqueue state UP group default
    link/ether 00:00:5e:00:01:00 brd ff:ff:ff:ff:ff:ff link-netns ns-link-quality
24: vethbfd0@if23: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether 00:00:5e:00:01:00 brd ff:ff:ff:ff:ff:ff link-netns bfdns
25: keepalived-tap: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc fq_codel state DOWN group default qlen 1000
    link/ether 32:1d:e4:ae:46:0e brd ff:ff:ff:ff:ff:ff
    inet 169.254.10.13/30 brd 169.254.10.15 scope global keepalived-tap
       valid_lft forever preferred_lft forever
27: vethdnsmasq0@if26: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether 02:01:02:03:04:07 brd ff:ff:ff:ff:ff:ff link-netnsid 4
    inet 169.254.254.103/32 brd 169.254.255.255 scope global vethdnsmasq0
       valid_lft forever preferred_lft forever

The CE has three Azure NICs by design, named mgmt, external and internal after the subnets they sit in. Those names describe Azure, not the F5 Distributed Cloud interface roles: the mgmt NIC is the Site Local Outside (SLO) interface, and no out-of-band management network is configured on these sites — see the interface model. The guest then presents none of the three the way that ordering suggests, and this is where reading the output wrong costs time.

In the guest	Carries
a-i-eth0	no address at all — this is the renamed physical eth0, and the Argo data plane owns it
vhost0	the SLO address, the one BGP peers from and the one the site object reports
eth1 and eth2	the external and internal/SLI addresses — but not in a fixed order

Which of eth1 and eth2 is the internal interface differs between nodes

Read live from the three CEs in this one deployment: on f5-xc-ce-vm-01 and f5-xc-ce-vm-03 the internal/SLI address is on eth2, and on f5-xc-ce-vm-02 it is on eth1. Nothing in the configuration chooses this.

So never infer a subnet from an interface name, and never carry a mapping from one node to another. Match on the address instead — the subnet a CE address belongs to is stable even though the interface holding it is not.

a-i-eth0 carrying no address is also the whole reason sshd cannot be reached on the SLO address. See SSH.

ip-link-show

Link-layer only: state, MTU, queueing discipline, MAC.

{"command":["ip-link-show"]}

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: a-i-eth0: <BROADCAST,MULTICAST,ALLMULTI,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 60:45:bd:eb:3f:f2 brd ff:ff:ff:ff:ff:ff
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 60:45:bd:eb:38:ea brd ff:ff:ff:ff:ff:ff
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 60:45:bd:eb:3d:f3 brd ff:ff:ff:ff:ff:ff
5: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN mode DEFAULT group default
    link/ether 62:61:2b:33:cd:42 brd ff:ff:ff:ff:ff:ff
10: tap_eth0: <BROADCAST,MULTICAST,ALLMULTI,UP,LOWER_UP> mtu 1500 qdisc multiq state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 60:45:bd:eb:3f:f2 brd ff:ff:ff:ff:ff:ff
11: vhost0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 60:45:bd:eb:3f:f2 brd ff:ff:ff:ff:ff:ff
13: vethfrr0@if12: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 02:01:02:03:04:05 brd ff:ff:ff:ff:ff:ff link-netns frrns
15: argo-envoy-0@if14: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1520 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:00:5e:00:01:00 brd ff:ff:ff:ff:ff:ff link-netns envoy-ns
17: host-envoy-0@if16: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether ee:95:ea:b5:8c:2a brd ff:ff:ff:ff:ff:ff link-netns envoy-ns
18: xc-br0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether aa:db:2f:e1:15:2c brd ff:ff:ff:ff:ff:ff
19: argo-end@xc-br0-end: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 76:e0:23:f6:48:8b brd ff:ff:ff:ff:ff:ff
20: xc-br0-end@argo-end: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master xc-br0 state UP mode DEFAULT group default qlen 1000
    link/ether aa:db:2f:e1:15:2c brd ff:ff:ff:ff:ff:ff
22: linkquality0@if21: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 590 qdisc noqueue state UP mode DEFAULT group default
    link/ether 00:00:5e:00:01:00 brd ff:ff:ff:ff:ff:ff link-netns ns-link-quality
24: vethbfd0@if23: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:00:5e:00:01:00 brd ff:ff:ff:ff:ff:ff link-netns bfdns
25: keepalived-tap: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc fq_codel state DOWN mode DEFAULT group default qlen 1000
    link/ether 32:1d:e4:ae:46:0e brd ff:ff:ff:ff:ff:ff
27: vethdnsmasq0@if26: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 02:01:02:03:04:07 brd ff:ff:ff:ff:ff:ff link-netnsid 4

Quicker than ip addr when the question is “is the link up and what is its MTU”. MTU mismatches are a recurring cause of tunnels that establish but pass no traffic.

ip-link-set Exec tier — mutating

Takes an interface or group up or down.

ip-link-set (<device>||<group>) (up||down)

Not run here, and not reachable the usual way

This is the only Exec-tier command on this build. It goes to the exec endpoint rather than exec-user, and it changes the node: taking eth0 down on a remote CE removes the path you are managing it through, including the debug API itself.

There is deliberately no captured output on this page. The capture harness refuses the entire Exec tier, and reads the tier from the live catalog rather than a hardcoded list, so this stays true if a future build promotes other commands into it.