For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Derek_Small_219's avatar
Derek_Small_219
Icon for Nimbostratus rankNimbostratus
Sep 12, 2011

Using GTM as master with no DNS server

We are deploying a couple GTMs to act as the authoritative public DNS servers for a new domain. We aren't interested in doing any geographic load-balancing at this point, just hosting a few static A-...
basic
getting started
new to f5
Cory_50405's avatar
Cory_50405
Icon for Noctilucent rankNoctilucent
Mar 19, 2014

A master zone within ZoneRunner is essentially going to be an authoritative zone for the device. Any queries directed to the GTM for a record in that zone will be answered by the GTM. You'll want a setup like this:

 

The parent provider zone (for example, company.com) will have NS records configured for your zone (for example, child.company.com) pointing to your two GTM appliances via hostname (ns1.child.company.com and ns2.child.company.com). You'll configure A records within your master zone (child.company.com) for ns1.child.company.com and ns2.child.company.com, corresponding to the public facing listeners on your GTMs.

 

So when a DNS server queries the parent zone at company.com and requests an NS record for child.company.com, the parent will hand back NS records of ns1.child.company.com and ns2.child.company.com. Then DNS servers will query your GTMs since these NS records correspond to your GTMs.

 

I hope this makes sense and I didn't ramble too much.

 

Sujal_147162's avatar
Sujal_147162
Icon for Nimbostratus rankNimbostratus
Mar 19, 2014
One more thing I missed out, when I do DNS watch of NS record for abc.co.in it get resolved by both NS but the output which DNS watch gives out , over there I cannot see.