Forum Discussion

Juergen_Mang's avatar
Juergen_Mang
Icon for MVP rankMVP
Dec 02, 2024

F5 as DNS over TLS Proxy

Hello Folks, I digged into the F5 Proxy capability for DNS over TLS and stumbled upon a problem. Flow is: Client -> Virtual Server DNS Plain (udp/53) -> DNS Server DNS over TLS (DTLS) (udp/85...
application delivery
security
F5_Design_Engineer's avatar
F5_Design_Engineer
Icon for MVP rankMVP
Dec 02, 2024

Hi Juergen,

 

Can you try this documentaiton

https://clouddocs.f5.com/training/community/dns/html/class5/module2/module2.html

DNS > Class 5 - DNS over HTTPS/DNS over TLS (Pre TMOS 16.1)Source | Edit on 

PDF

Proxying DNS over TLS Queries to Traditional DNS

DoT-to-DNS is a bit more simplistic. We’re simply taking the existing DNS request and encapsulating it in TLS. No iRule magic needed here; just classic BIG-IP high-performance SSL offloading.

The client-SSL profile on this virtual server specifies that SSL/TLS termination should occur on the client side of the connection.

DNS > Class 6 - Native DNS over HTTPS/DNS over TLS

Kindly rate and mark it as solution if it help resolve your issue.

HTH

Best regards

F5 Design Engineer

MVP