Forum Discussion

Kelly's avatar
Kelly
Icon for Nimbostratus rankNimbostratus
Aug 25, 2015

Log DNS queries with iRule?

We are load balancing our DNS requests through LTM. We'd like to log at the F5 so we capture the client address (LTM uses SNAT). Based on a few examples on Devcentral, they mostly use this same query...
application delivery
deployment
devops
dns
iRules
LTM
VernonWells's avatar
VernonWells
Icon for Employee rankEmployee
Aug 26, 2015

That shouldn't matter. A set of those commands work with LTM, including 

DNS::question
. I just tried the following for a VE licensed and provisioned for LTM (no GTM) and it did what I expected:

when DNS_REQUEST {
    log local0. "QUERY from ([IP::client_addr]) for ([DNS::question class] [DNS::question type] [DNS::question name])"
}

A log entry looks like this:

tmm1[9500]: Rule /Common/dns_test_rule : QUERY from (10.11.210.200) for (IN A www.foo.com)