For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

tuannguyen1712's avatar
tuannguyen1712
Icon for Altocumulus rankAltocumulus
Jul 10, 2019

BigIP DNS in route domain

Hi guys, really need your help!!! I have 4 F5 (2 running DNS, 2 running LTM, both in HA pair). since this system needs to service for public user (internet) and private user (over wan) I need to con...
application delivery
BIG-IP DNS
LTM
Dario_Garrido's avatar
Dario_Garrido
Icon for Noctilucent rankNoctilucent
Jul 10, 2019

Hello.

​

Base on the documentation:

​"Important: On a BIG-IP® system that includes both Local Traffic Manager™ (LTM®) and Global Traffic Manager™ (now BIG-IP ®DNS), all IP addresses that BIG-IP DNS references (virtual IP addresses, link addresses, and so on) must be associated with route domain 0."

REF - https://techdocs.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/tmos-routing-administration-12-0-0/9.html

​

You can use route domains in different LTM devices using this

REF - https://techdocs.f5.com/kb/en-us/products/big-ip-dns/manuals/product/bigip-dns-implementations-13-0-0/11.html

​

KR,

Dario.

tuannguyen1712's avatar
tuannguyen1712
Icon for Altocumulus rankAltocumulus
Jul 11, 2019

By the way, do you know the big-ip dns feature which allows to resolve the same domain to different virtual server for public and private request?

  • Dario_Garrido's avatar
    Dario_Garrido
    Icon for Noctilucent rankNoctilucent
    Jul 11, 2019

    I don't know if I understand correctly, but you can apply an iRule to one VS to respond differently base on the source ip for example.

  • tuannguyen1712's avatar
    tuannguyen1712
    Icon for Altocumulus rankAltocumulus
    Jul 11, 2019

    I just found out the way, go to DNS>GSLB>Topology to create Topology Load Balancing to Distribute DNS Requests to Specific Resources :)