For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Shaun_81936's avatar
Shaun_81936
Icon for Nimbostratus rankNimbostratus
Mar 03, 2009

External GTMs - load balance Internal DNS name

We currently use two GTMs (sync set located in DMZ) to load balance external DNS names and would like to utilize them to load balance a critical internal DNS name.   I'm not sure what the correct...
config
design
BA_Rossmeisl_77's avatar
BA_Rossmeisl_77
Historic F5 Account
May 18, 2012
If you are running v11.0 you can always attach an LTM iRule to the GTM listeners with something like this if you have a per-determined TLD like .local for your internal dns structure.

when DNS_RESPONSE {
if { ([DNS::question name] ends_with ".local") and !([IP::addr [IP::remote_addr] equals 10.0.0.0/8] or [IP::addr [IP::remote_addr] equals 172.16.0.0/12] or [IP::addr [IP::remote_addr] equals 192.168.0.0/16]) } {
DNS::drop
}
}