Forum Discussion

Zdenda's avatar
Zdenda
Icon for Cirrus rankCirrus
Feb 18, 2020

DNS through prod interface

Hello, we use pool members defined through FQDN.

So far we have used DNS set in system/configuration/device/DNS, it works fine, F5 communicates through mgmt interface with the DNS server.

 

Can we send DNS queries through production interface instead of management? I know it might be done through iRule (old concept of using FQDN pool members), but I would like to avoid any irules. Is there any other trick?

 

Thanks,

Zdenek

application delivery
BIG-IP
cloud
LTM

3 Replies

  • iaine's avatar
    iaine
    Icon for Nacreous rankNacreous
    Feb 18, 2020

    DNS queries should follow the routing table that has been configured on the device. Do you have a management route defined for DNS that will send these requests over the mgmt interface...?

     

    tmsh list sys management-route

     

  • Zdenda's avatar
    Zdenda
    Icon for Cirrus rankCirrus
    Feb 18, 2020

    There is default route and couple of static for our central management stuff etc. Since DNS is part of system settings I guess it uses management port as default. Do you think we could override it by using /32 route in TMOS (in some partition)?

  • iaine's avatar
    iaine
    Icon for Nacreous rankNacreous
    Feb 18, 2020

    Hi

    Yes, a /32 route should take precedence and work ok