For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Nath's avatar
Nath
Icon for Cirrostratus rankCirrostratus
Nov 10, 2023

DNSSEC in CNAME records

Hi, 

Has anyone experienced having issues with CNAME records when DNSSEC is enabled?

I have this situation where one CNAME got a problem after enabling DNSSEC. Then after removing the DNSSEC configuration and DS records on the parent domain, the DNS resolution works after the propagation time of 8-10 mins.

application delivery
security

1 Reply

  • whisperer's avatar
    whisperer
    Icon for MVP rankMVP
    Nov 10, 2023

    Can you provide an example? We're both the A record and CNAME record in the same zone? Where you able to query and validate the DNSSEC sig for the A record? What was the issue with the CNAME lookup?