For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Using Client Subnet in DNS Requests

BIG-IP DNS 14.0 now supports edns-client-subnet (ECS) for both responding to client requests (GSLB) or forwarding client requests (screening). The following is a quick start on using this feature. ...
Published Sep 14, 2018
Version 1.0
application delivery
BIG-IP DNS
James_379753's avatar
James_379753
Icon for Nimbostratus rankNimbostratus
Dec 20, 2018

This seems to be exactly what we need in our architecture but has anybody got this working where the LDNS server is a Windows 2016 server?

 

In our lab we can see the Windows 2016 server forward the request to the F5 but we cannot see any eDNS client subnet field in a wireshark trace of that request. As such the solution doesn't work.

 

Does anybody know if we need to 'turn on' the client subnet somewhere on the Windows 2016 server? Thanks.