F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Wasfi_182818's avatar
Wasfi_182818
Icon for Altostratus rankAltostratus
Aug 12, 2016

How can I apply an AFM DoS profile (DNS) and an DNS service profile to a GTM listener

Hi

 

How can I apply an AFM DoS profile (DNS) and an DNS service profile to a GTM listener. The idea here is to protect the BIG-IP GTM appliance itself from a DNS DoS attack.

 

Kindly Wasfi

 

application delivery
BIG-IP DNS
security

1 Reply

  • gsharri's avatar
    gsharri
    Icon for Altostratus rankAltostratus
    Aug 12, 2016

    What version are you running? On 11.6.0 the DNS service profile can be assigned to either the dns listener or the listeners corresponding local traffic virtual server (GTM listeners are really just virtual servers). The AFM dns dos profile is assigned to the local traffic virtual server: Local Traffic > Virtual Server List > vs/listener_name > Security > Policies. This dos protection profile does not appear under the GTM listener settings.