For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

F5_Jeff's avatar
F5_Jeff
Icon for Cirrus rankCirrus
Mar 02, 2017

GTM WIP is disabled but website is still accessible?

Hi all,   We have 2 GTM deployed in two different data centers. All are synced. However, when I disable the pool and the WIP, we can see that the WIP is still accessible and the Public IP is still...
application delivery
BIG-IP DNS
LTM
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Mar 03, 2017

Hi,

 

When you create a wide IP, if Alternate or fallback load balancing method is "Return to DNS", and primary LB method fails, then the request is sent to DNS server of the GTM VS (created when you created a listener).

 

if the GTM is configured with F5 IP address, then, the GTM Listener send DNS request to local BIND.

 

when you create a wide IP, each pool members are added in the BIND configuration as A Record for the wide IP name. you can see the BIND configuration in "Zone Runner" menu.

 

you can see that GTM respond with only one IP address (default behavior, can be changed), when all members are down, BIND respond with multiple values (all wide IP members)