For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

dkalmaz_116121's avatar
dkalmaz_116121
Icon for Nimbostratus rankNimbostratus
Jan 15, 2013

redirecting client from udp 53 to tcp 53

Let's say any client(windows xp,windows 7-8,windows 2008 etc) queries a dns name from a DNS server that is behind the F5 with UDP-53.

 

Can F5 stops this UDP-53 traffic and redirects/informs the client to query again with TCP-53?

 

 

client-->UDP53-->(stops this traffic)F5-->DNSSRV

 

F5-->redirect/inform client -->client

 

client-->TCP53-->F5-->DNSSRV (resolv)

 

 

Regards

 

config
design

2 Replies

  • nitass's avatar
    nitass
    Icon for Employee rankEmployee
    Jan 15, 2013
    can we convert between udp and tcp instead?

     

     

    TCP to UDP conversion / collection

     

    https://devcentral.f5.com/community/group/aft/2156736/asg/50
  • dkalmaz_116121's avatar
    dkalmaz_116121
    Icon for Nimbostratus rankNimbostratus
    Jan 16, 2013

    no convertion is not enough,

     

    i guess UDP and TCP data are not the same.

     

    we need this because of DNS security so we need that client should come with TCP , so i have to stop UDP because all clients first try UDP and inform the client to come again with TCP.