F5 Sites
  • F5.com
  • LearnF5
  • NGINX
  • MyF5
  • Partner Central
Contact
  • Under Attack?
  • F5 Support
  • DevCentral Support
  • F5 Sales
  • NGINX Sales
  • F5 Professional Services
Skip to contentBrand Logo
Forums
CrowdSRC
Articles
Groups
EventsSuggestionsHow Do I...?
RegisterSign In
  1. DevCentral
  2. Articles
  3. Technical Articles

DNS Profile Benefits in iRules

    I released an article a while back on the DNS services architecture now built in to BIG-IP, as well as a solution article that showed some fancy DNS tricks utilizing the architecture to b...
Published May 08, 2013
Version 1.0
application delivery
code
dev
development
devops
dns
infrastructure
iRules
management
service provider
JRahm's avatar
JRahm
Icon for Admin rankAdmin
Joined January 20, 2005
View Profile
JRahm's avatar
JRahm
Icon for Admin rankAdmin
Joined January 20, 2005
View Profile
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Oct 07, 2017

Hi,

 

I found this article too late... I wrote my own code before :-( ! The picture made me laugh because it remembered me trying to understand the DNS encoding logic in RFC..

 

I had a customer who used the DNS-Lite license for DC HA requirements for only one Application : Exchange.

 

there are only 4 DNS servers requesting to this record.

 

The rate limite of this license was enough for this need. There is 1 dns request per minute for the only one record.

 

Now the customer had to upgrade to 12.1.2 Appliances so I had to find a solution before to reactivate the license. the DNS license is too expensive for this little need.

 

I first wrote an irule like yours which worked when I requested from dig and nslookup utility to the F5 but I have encountered an issue when the DNS server includes a "additional record".

 

This record is appended after the question, so it is included in the ${question} variable. As you insert the answer after it, there is a mismatch in the response.

 

the customer's AD 2012 always included an additional record. so the answer was rejected and the DNS cache was cleared... Exchange was not working anymore. oops!

 

You can look at my code DNS lite with topology selection witch decode the request and encode the response based on pool member availability.

 

ABOUT DEVCENTRAL

DevCentral NewsTechnical ForumTechnical ArticlesTechnical CrowdSRCCommunity GuidelinesDevCentral EULAGet a Developer Lab LicenseBecome a DevCentral MVP

RESOURCES

Product DocumentationWhite PapersGlossaryCustomer StoriesWebinarsFree Online CoursesF5 CertificationLearnF5 Training

SUPPORT

Manage SubscriptionsProfessional ServicesProfessional ServicesCreate a Service RequestSoftware DownloadsSupport Portal

PARTNERS

Find a Reseller PartnerTechnology AlliancesBecome an F5 PartnerLogin to Partner Central

F5 logo©2024 F5, Inc. All rights reserved.
TrademarksPoliciesPrivacyCalifornia PrivacyDo Not Sell My Personal Information