DNS Resolver Cache

Forums Technical Forums
, , , , ,
1

Hi,

I’m currently investigating the option to dispose of my LDNS servers and let the LTM do the recursive lookups for my clients and cache responses.

I have read the following statement from there site and I’m wondering if this statement applies to what I was trying to do.

“It is important for network architects to note that it is possible to configure the local BIND instance on the BIG-IP® system to act as an external DNS resolver. However, F5 Networks does not recommend this approach, because the performance of BIND is slower than using a resolver cache.”

Basically what I was trying to accomplish is have my clients (linux, windows, etc) point to the LTM as their DNS servers, and let the DNS resolve and cache.

Thanks

2

You can technically enable bind on an LTM, but it isn’t going to be any better or faster than your current bind solution. My recommendation is to look at licensing/provisioning the Global Traffic Manager (GTM) module. That will give you GSLB, ZoneRunner for non-load balanced (bind-like) DNS, DNSSEC, additional caching/resolving capabilities, and DNS Express for DDoS-immune resolution.

3

Kevin’s suggestion is quite valid but perhaps overkill for your requirements if your clients are internal; I’d suggest the DNS Services feature set would suffice if they are.