For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

David__Pasch's avatar
David__Pasch
Icon for Altostratus rankAltostratus
Feb 16, 2016

GTM w/o BIND and NS Records

Hey all! Happy Cupcakes!   I am having an issue where some clients are having issues looking up records on the GTM. We have a basic configuration with DNS delegating to the GTM, and the GTM is NOT...
application delivery
dns
iRules
LTM
security
VernonWells's avatar
VernonWells
Icon for Employee rankEmployee
Feb 17, 2016

The server cannot compel the client query behavior, so whether it is DNSExpress or BIND responding shouldn't alter directly what the client asks for.

Something is a bit unclear to me. You say that when the client asks for the NS set of wip.site.com, it receives back A records. Normally, it should receive an NS set with a set of glue A records in the Additional section. Is that what's happening, or is it really just getting A records? If it receives just A records, the delegating nameserver should be changed to provide an NS set with glue records.

I assume you ran a packet capture on the client? If so, can you provide the output of tcpdump against that capture? If you captured the entire length for each packet and support -s0 to 

tcpdump
, then the output stream should show the DNS questions and responses.