For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Richard_H_12595's avatar
Richard_H_12595
Icon for Nimbostratus rankNimbostratus
Jun 09, 2014

GTM DNSSEC and dig

In my quest to work with dotgov to get DNSSEC enabled on the GTM (it shouldn't be this hard) the latest thing they are saying is that dig is not returning the DNSKEY records. The command they are us...
BIG-IP DNS
deployment
Cory_50405's avatar
Cory_50405
Icon for Noctilucent rankNoctilucent
Jun 10, 2014

It may be because the query over UDP is being truncated and is reattempted over TCP, which is blocked somewhere along the path to your GTM. Common behavior when requesting type ANY, which usually returns quite a bit of data. That's a poor testing solution by dotgov.