For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

WeaverJK's avatar
WeaverJK
Icon for Nimbostratus rankNimbostratus
Sep 01, 2016

F5 as DNS Client - configure to require DNSSEC?

Can BIG-IP be configured as a DNS Client using DNSSEC?   I have found lots of articles on how to configure F5 as a DNS Server (GTM/DNS) and how to secure that using DNSSEC. This is not what I'...
BIG-IP
security
IanB's avatar
IanB
Icon for Employee rankEmployee
Sep 06, 2016

There are several places where bigip can perform DNS lookups, and they handle the lookup in different ways, for example FQDN nodes are resolved through the bigd process, whereas http explicit proxy lookups are performed directly in tmm.

 

I'm not sure if there's any way to get them to validate DNSSEC responses, but it would help if you could clarify where you're hoping to have this functionality work, and then I can focus on that.