Forum Discussion
JRahm
Admin
Oct 27, 2006GTM Intercept bypass?
Our DNS servers are sitting in a bridged vlan behind the GTM so I can intercept the DNS queries heading to the DNS server. Is it possible to disable this functionality based on source IP address on a...
JRahm
Admin
Oct 27, 2006Most likely it's my ignorance, but I fail to see how a topology record will change the IP address of the virtual server address it is handing out. My pool members for wideip www.myurl.com are:
vs {
name "poc2_myurl-http"
address 10.10.1.150:80 // http
monitor "custom_bigip"
translates to 10.10.2.150:0
}
vs {
name "poc2_myurl-http"
address 10.20.1.150:80 // http
monitor "custom_bigip"
translates to 10.20.2.150:0
}
Creating a topology record will select one of these two records, which I will need to make sure the local server is returned, but either selection will return the address, not the translated address. The address is unknown to the internal servers, it must get a resolution for the translated address. The *real* dns server sitting behind the GTM has views configured that hands out the correct address based on source IP. GTM can also do this, but I don't want to manage internal dns functions, I want to pass them to the name server. Most will because I am only listening for our GSLB URL's, but there is an internal need to request that URL as well, and the public address is not useful to the requesting devices. I am hopeful that I can do something like:
when DNS_REQUEST {
if { [IP::client_addr] equals "x.x.x.x" } {
release_request_to_nameserver
}
}
I have never used topology, so I'm sure I am missing something there. TIA.
Jason
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects
