For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Antony2015's avatar
Antony2015
Icon for Altostratus rankAltostratus
May 05, 2014

External DNS to GTM

Dear All,   I have completed a setup where all internal users are able to hit the URL. But, when the users are coming from the Public Internet, the solution is failing for DR site. The traffic flo...
deployment
design
Antony2015's avatar
Antony2015
Icon for Altostratus rankAltostratus
May 08, 2014

Thanks for the understanding on this and the information.

 

I can access the Active / DR site externally using IP address (https://192.250.23.8 & https://67.202.219.126) , not with FQDN.

 

Am still waiting for the Zone delegation in the External DNS.

 

For example :

 

geha.bluefin.com IN CNAME geha.gtmf5.bluefin.com ( resolved)

 

gtmf5.bluefin.com IN NS jaxgtm1-p.bluefin.com ( not resolved yet) gtmf5.bluefin.com IN NS cnjgtm1-p.bluefin.com ( not resolved yet)

 

The zone delegation happening to some other Name servers when resolving , not the above one. (SOA/NS resolving as below)

 

gtmf5.bluefin.com Non-authoritative answer: gtmf5.amberoad.com nameserver = ns1626.ztomy.com gtmf5.amberoad.com nameserver = ns2626.ztomy.com

 

gtmf5.bluefin.com

 

Non-authoritative answer: gtmf5.bluefin.com primary name server = ns1626.ztomy.com responsible mail addr = abuse.opticaljungle.com serial = 2011062801 refresh = 3600 (1 hour) retry = 900 (15 mins) expire = 604800 (7 days) default TTL = 86400 (1 day)

 

jaxgtm1-p.bluefin.com IN A 192.250.23.8 ( resolved) cnjgtm1-p.bluefin.com IN A 67.202.219.126​(resolved)

 

192.250.23.8/67.202.219.126 NATed to GTM listener Private IP

 

Kindly advise if am in right direction towards the resolution.

 

Thanks / Regards,

 

Anto Jose