Forum Discussion

Sly_85819's avatar
Sly_85819
Icon for Nimbostratus rankNimbostratus
Mar 19, 2012

GTM topology on internal network

Hi,

 

 

I plan on doing proximity routing internally and thought of doing that via GTM. I configured topology on GTM and realized that the query originated from LDNS and not the actual client (new learning for me). Next step, I modified the topology according to our regional dns infrastructure and did some basic testing which worked fine. Now comes the real problem. We have Anycast deployed across company network for dns server. All client machines have primary dns server with Anycast IP which should be one of the closest dns server. The problem is that the Anycast is not working as expected, and the client is routed to only one DNS server. This breaks the topology configuration on GTM. If I change the DNS server to specific one, it works fine as expected. We are looking at the routing config but would like to know if there is any way to have client query the GTM directly? Is there any other to achieve this? or Can we have client make iterative query?

 

 

Thanks in advance.

 

config
design
  • hooleylist's avatar
    hooleylist
    Icon for Cirrostratus rankCirrostratus
    Mar 21, 2012
    Hi Sly,

     

     

    I can't think of a reason you couldn't have clients query GTM directly. You'd just configure them with a listener IP that the GTMs answer on. GTM in v11.1 supports anycast:

     

     

    GTM 11.1 release notes

     

    http://support.f5.com/kb/en-us/products/big-ip_gtm/releasenotes/product/relnote-gtm-lc-11-1-0.htmlrn_new

     

     

    IP Anycast

     

     

    This release provides support for IP Anycast for DNS services on BIG-IP GTM. This configuration helps mitigate distributed denial-of-service attacks (DDoS), reduce DNS latency, improve the scalability of your network, and assist with global traffic management.

     

     

    Configuring IP Anycast Route Health Injection

     

    http://support.f5.com/kb/en-us/products/big-ip_gtm/manuals/product/gtm-implementations-11-1-0/11.html

     

     

    Aaron
  • Sly_85819's avatar
    Sly_85819
    Icon for Nimbostratus rankNimbostratus
    Mar 26, 2012
    Hi Aaron,

     

     

    The only reason I thought of sending queries directly to GTM so that it can see the original client IP. We do have DNS anycast setup, which is configured for infoblox. I do not want to change anything from Anycast DNS or take over DNS. We had some problem with anycast routing internally and it was only using on IP from globally spread infoblox servers. This made GTM to handover resource for that particular region which was not correct as per the topology. We have resolved that issue by tweaking WAN routing and solved 90% of issues. We are still doing testing. I wanted to know if there is any option like X-Forwerder or something which will somehow preserve the source client IP. Thanks for your response. I will go thru the suggestions.

     

     

    -Vishal