Forum Discussion

HX_TL_143556's avatar
HX_TL_143556
Icon for Nimbostratus rankNimbostratus
Feb 09, 2014

GTM bring down gateway firewall

my GTM is a 20xx model. Occasionally, it bring up a lot of internet connection (77k session) to TCP/53 targeting 173.245.58.100. This action may jam my gateway firewall. What type of traffic is that ...
boneyard's avatar
boneyard
Icon for MVP rankMVP
Feb 10, 2014

well a simple google reveals that that ip belongs to abby.ns.cloudflare.com which is a DNS server from cloudflare. as port 53 is usually DNS traffic this makes sense.

 

you probably configured that IP yourself, perhaps as one of the local DNS servers? or as one of the servers you transfer or get an DNS zone from?

 

you can use management routes to send traffic via the management interface

 

http://support.f5.com/kb/en-us/solutions/public/13000/200/sol13284.html