For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jeremiah_47575's avatar
Jeremiah_47575
Icon for Nimbostratus rankNimbostratus
Feb 14, 2010

Recommended idle timeout setting for DNS (UDP)?

I have two sets of LTM 3400's hosting my primary and secondary dns vip's with a pool of dns servers behind each respective vip. The vip's are setup for Performance (Layer 4) and I'm using a custom 'f...
config
design
Jeremiah_47575's avatar
Jeremiah_47575
Icon for Nimbostratus rankNimbostratus
Feb 14, 2010
I'm using a fastL4 all protocols (tcp/udp) vip currently with a custom fastL4-dns profile set at 120s. TCP is indeed needed for the zone xfer. Are you suggesting that I split it into 2 vip's... one UDP with 10s or less timeout and one TCP with 120s or 300s default? I suppose that might work well... I will test at earliest convenience.

 

 

Open to any other suggestions as well.

 

 

Thanks,

 

 

-Jeremiah