For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Maxim_Taskov_90's avatar
Maxim_Taskov_90
Icon for Nimbostratus rankNimbostratus
Apr 05, 2006

Wildcard DNS Server and iRules

Hi - I am running BIG-IP 9.1 on 5100 and 1000 units.     My objective is to assign SNAT and limit bandwidth utilization for DNS (UDP/53) traffic for specific clients and leave all other servers ...
application delivery
dev
devops
iRules
Maxim_Taskov_90's avatar
Maxim_Taskov_90
Icon for Nimbostratus rankNimbostratus
Apr 05, 2006
Sorry I missed that detail...no I am not getting the same TCL error.

 

 

The moment I enable the iRule on the VS, all DNS traffic dies...regardless if they are or they are not members of the class "x_group".

 

 

The "x_group" class is an Address type and has four hosts in it, which are located on the BIG-IP internal network.

 

 

The "DNS" servers pool contains four possible DNS destinations and the "DNS" pool is assigned as a default pool on the wildcard VS.

 

 

The wildcard VS is available on the Internal VLAN only.

 

 

Thanks...Maxim