For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

CraigD1_147916's avatar
CraigD1_147916
Icon for Cirrus rankCirrus
Mar 18, 2014

WideIP and Persistence using Microsoft delegation

I am hoping to get some advice about working with persistence via WideIP.

 

I am looking to use persistence under a WideIP but as I have it configured, I see that the Microsoft DNS does recursion for the subdomain delegation and so GTM only sees the source IP of the Microsoft DNS servers to add to the persistence table.

 

Is there a better way to do this (with server 2008) and only return the NS record to the client and then let the client hit the GTM directly to populate the persistence table with the client IP? I don't see that there is a way to disable recursion for a single delegation though.

 

availability
BIG-IP DNS
management
microsoft

2 Replies

  • Cory_50405's avatar
    Cory_50405
    Icon for Noctilucent rankNoctilucent
    Mar 18, 2014

    This typically isn't how things work in an AD environment. Clients will always use AD as their local DNS server and I'm not sure there is a good way around that. On the bright side you will get persistence but you will be directing all users to the same resource. If your GTM ultimately pointed back to an LTM though, you would have some options from a local load balancing perspective.

     

  • CraigD1_147916's avatar
    CraigD1_147916
    Icon for Cirrus rankCirrus
    Mar 19, 2014

    Thanks Cory.

     

    I wanted to point to LTMs, but this presented issues of its own. The servers are in different DCs and I am unable to SNAT due to the app needing the source IP and not being HTTP for XFF use.

     

    If nothing else, at least there are quite a few LDNS servers that the clients will hit and that will give me some diversity.