For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

kouriada_284551's avatar
kouriada_284551
Icon for Nimbostratus rankNimbostratus
Apr 19, 2017

Experiences with CAA implementation

Hello everyone, I would like to ask about experiences with implementation of CAA (Certification Authority Authorization) on DNS (GTM) on F5 v12 and higher? I have been trying to find some tech_doc a...
BIG-IP
BIG-IP DNS
devops
security
basapp's avatar
basapp
Icon for Nimbostratus rankNimbostratus
Aug 23, 2018

In case this wasn't already answered, BIG-IP 12.x, 13.x, and 14.x have a high enough version of BIND that you can manually edit the zone files (carefully) to add the CAA record. See https://support.f5.com/csp/article/K7032.

 

I understand that using Zone Runner to manage CAA record types are on the roadmap for 14.x.

 

We implemented a CAA record on our F5 DNS the manual way and it worked for us.