For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

satish_txt_2254's avatar
satish_txt_2254
Icon for Cirrus rankCirrus
Aug 14, 2017

Kerberos behind F5 load-balancer

We have two kerberos server (freeipa), they are on private address and now we want to expend service to public so planning to put them behind F5 so i get high availability and protection too, But hav...
BIG-IP
devops
LTM
security
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Aug 17, 2017

Hi,

 

you can create a DNS PTR record. if VIP is 10.20.30.40 and application SPN is HTTP/myapp.company.com, create the following DNS record:

 

40.30.20.10.in-addr.arpa.INPTR myapp.company.com