For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Rupesh_M's avatar
Rupesh_M
Icon for Nimbostratus rankNimbostratus
Oct 07, 2015

GTM - Configuring two listner IPs to resolve external & internal url with same FQDN

Hi,

 

Scenario - We have scenario where we need to use URL with same FQDN in LAN & Internet. This can be done with GTM using single listener IP.

 

Query - Is it possible to achieve this scenario using two listener Ips one for LAN & another for Internet?

 

BIG-IP DNS
deployment
design

4 Replies

  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Oct 07, 2015

    Hi,

     

    what do you need? create 2 listeners for both internal and external users or resolve queries with internal IP if request source is internal?

     

  • IheartF5_45022's avatar
    IheartF5_45022
    Icon for Nacreous rankNacreous
    Oct 07, 2015

    Absolutely - I always dual-home my GTMs with internal/external listeners.

     

    You can then use either topology records or iRule (horses for courses) to emulate DNS views. Here is a good link to configuring topology records for split view DNS.

     

    • Rupesh_M's avatar
      Rupesh_M
      Icon for Nimbostratus rankNimbostratus
      Oct 07, 2015
      Thanks for your reply.The document is useful , gives complete insight. It is require to configure topology based on source IPs. Can it be done based on listner IP , instead of source IP ? That is, if request is comming from external listner IP then resolve external pool and if request is comming from internal listner IP then resolve internal pool.
  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Oct 07, 2015

    Hi,

    you can create pool external and internal with the following method:

    • external pool : exchange_pool
    • internal pool : exchange_pool_int (append _int prefix)

    and use the following irule in wide IPs

    when DNS_REQUEST {
  if { [IP::addr [IP::local_addr] equals X.X.X.X] } {
    pool "[DNS::rrname]_int"
  }
}