For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

5 Replies

  • JRahm's avatar
    JRahm
    Icon for Admin rankAdmin
    May 05, 2010
    Unless it's been backported, my understanding is DNSSEC is only on v10.1 and forward.
  • Austin_Geraci's avatar
    Austin_Geraci
    Icon for MVP rankMVP
    May 05, 2010

    Oh man this is not good.... Are you 100% positive it's not possible to configure it in v9.4.8? Seems it was turned on globally today...

     

  • JRahm's avatar
    JRahm
    Icon for Admin rankAdmin
    May 05, 2010
    Contact support for a definitive answer, but it would be news to me if DNSSEC was available pre-v10.1.
  • Austin_Geraci's avatar
    Austin_Geraci
    Icon for MVP rankMVP
    May 06, 2010
    Well I was able to figure out how to hack through dnssec with bind.. that config is not support by F5... It is in v10.1 like stated, and supported... btw, my rep said it's an add on module...odd..

     

     

     

    My issue was not actual native dnssec, but it was the (limited) recursive loopups we were doing.. once DNSSEC was enabled in the Internet recursive lookups were taking longer... which made hosts pointing to the boxes for recursive lookups perform more and more lookups.. taking named down...