Forum Discussion
Herman2024
Cirrostratus
CirrostratusShould we enable DNS DDOS protection on our on-premise F5 bigip ?
Hi, our used DNS cache /proxy service of Silverline, but now silverline was decommissioned, should we enable dns ddos protection on our on-premise F5 bigip? can someone pls advise, thanks?
1 Reply
- Nikoolayy1
MVP
What about using secondary zone in XC ? This way the attacks will never hit your on-prem F5 DNS/GTM?
The last article even shows what I mean.
Also for on-prem bigip you will need the AFM module for DNS DDOS protection.
Use F5 Distributed Cloud to control Primary and Secondary DNS
https://docs.cloud.f5.com/docs-v2/dns-management/how-to/manage-dns-zones
https://my.f5.com/manage/s/article/K000147071
