For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Emmett_116863's avatar
Emmett_116863
Icon for Nimbostratus rankNimbostratus
Mar 12, 2014
Solved

Use GTM Cluster for internal recursive name resolution

Hi Everyone,   I have been trying to set up what I would think would be a fairly normal configuration.   I have a pair of F5 GTM's running 11.3 running as authoritative name servers for a few d...
BIG-IP DNS
deployment
design
  • Cory_50405's avatar
    Cory_50405
    Mar 12, 2014

    You can assign your listener address to whatever you want from that internal vlan. It doesn't have to be a floating IP address, but it can be. In the DNS profile you attached to your listener, did you enable 'Use BIND Server on BIG-IP'? Since you defined recursion through named, it'll need to be able to use BIND.

     

    If locally issued GTM queries can't recurse out to the Internet, then it could be something is preventing it from getting out, like a firewall.

     

Cory_50405's avatar
Cory_50405
Icon for Noctilucent rankNoctilucent
Mar 13, 2014

We don't use multiple views on our GTMs, so I can't assist there.

 

The source IP address could depend on the ways in which the device is sending traffic. Since you stood up a virtual server for a DNS listener, I would expect client queries to this virtual server to use a floating IP as it egresses the LTM (assuming SNAT auto map is set on the VS).

 

TMM should never send queries from clients over the management network.

 

Queries issued from the device itself (doing a dig from command line for example) would probably use the external self IP (non-floating).