For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jeremiah_47575's avatar
Jeremiah_47575
Icon for Nimbostratus rankNimbostratus
Feb 14, 2010

Recommended idle timeout setting for DNS (UDP)?

I have two sets of LTM 3400's hosting my primary and secondary dns vip's with a pool of dns servers behind each respective vip. The vip's are setup for Performance (Layer 4) and I'm using a custom 'f...
config
design
L4L7_53191's avatar
L4L7_53191
Icon for Nimbostratus rankNimbostratus
Feb 24, 2010
Thanks for the update. Did you confirm that you're SNAT-ing correctly on the egress (response) VIP, and double checked your port translation settings? A client-side tcpdump/wireshark capture of a failed transaction would be really interesting to see. Either way, it seems like you've gotten a fairly solid solution for your needs in place, so thanks for sharing your setup.

 

 

-Matt