For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Techgeeeg_28888's avatar
Techgeeeg_28888
Icon for Nimbostratus rankNimbostratus
Jan 03, 2013

DNS Query Flow

Hi Everyone,   I have a small query realted to DNS query and how GTM works.     I have GTM configured with 2 ISP links and acts as DNS. Now i need to know the following     1) A cl...
config
design
Techgeeeg_28888's avatar
Techgeeeg_28888
Icon for Nimbostratus rankNimbostratus
Aug 16, 2015

Hi Gregory,

 

Thanks man appreciate your response.... just one point... I know the DNS express tab appears in LTM but I believe unless the box is license for GTM this feature won't work, correct me if I am wrong. Also I need to further understand your point when you say " implementing only the GTM module can already help you protect against DDoS attacks" two points comes to my mind.

 

  1. The no. of queries that the GTM can answer per second is very huge so in order to bring down this box the setup (attack) that may generate very huge amount of query is not easy to setup.

     

  2. On GTM we can configure iRules to accept or block certain types of queries so that is one of the ways to enable protection.

     

What are more features that the GTM can offer that I have missed can you pls highlight.

 

Regards,

 

  • Gregory_Thiell's avatar
    Gregory_Thiell
    Icon for Employee rankEmployee
    Aug 21, 2015
    As I said, DNS Express is a GTM feature that is also available with LTM. To my knowledge, it should work even if GTM is not licensed nor provisioned. However, to make sure you can confirm with sales and with what is displayed under System > License. As for the features of GTM, you can start here: https://www.f5.com/pdf/products/big-ip-global-traffic-manager-overview.pdf If you have more questions, I encourage you to talk to an F5 sales rep. I'm just a consultant. :)