For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

prashant_alhat_'s avatar
prashant_alhat_
Icon for Nimbostratus rankNimbostratus
Apr 12, 2018

F5 DNS

Hello All,   I have two ISP links & for the same we create two listeners. in pool we create 8 VS for load balance 4 IP one ISP & 4 IP second ISP.   when we check dns from public i got my pool I...
application delivery
BIG-IP
BIG-IP DNS
security
Shaun_Simmons1's avatar
Shaun_Simmons1
Icon for Altostratus rankAltostratus
Apr 12, 2018

To allow DNS to resolve, you only need one DNS listener IP: TCP and UDP

 

-How to setup a DNS Zone

 

You are wanting to load balance multiple internal DNS servers and have one external IP to "listen" for DNS requests.

 

VIP(Public IP) -> Pool(multiple Private IP DNS servers)

 

Nslookup will show the DNS server's IP that is configured on your box (ipconfig /all DNS IP) and it will show the Non-Authoritive resolution for the FQDN you are looking up.

 

PS F:> nslookup foobar.com Server: lala.meow.blahblah.com Address: 10.1.1.11 <---My local Private IP DNS server seen via "ipconfig"

 

Non-authoritative answer: Name: foobar.com Address: 162.241.216.134

 

Google search to help understand "Recursive DNS"