cancel
Showing results for 
Search instead for 
Did you mean: 
Login & Join the DevCentral Connects Group to watch the Recorded LiveStream (May 12) on Basic iControl Security - show notes included.

Best practices Windows DNS forwarding to F5 DNS

birchy
Nimbostratus
Nimbostratus

Hey,

 

We currently are using our F5 DNS behind our Windows DNS (our Windows DNS forwards specific DNS requests to our two F5 DNS devices) - is there any best practices in this setup?

 

The challenge we face currently is that Windows DNS will only round robin send requests to our two F5 DNS - if we lose one of the F5 devices half of the requests will obviously not work as Windows DNS is not smart enough to do health checks.

 

The F5 devices are in a sync group so they are independent but configuration is synced between them.

 

Is there a better / more intelligent way of setting this up? any direction to documentation would also be grateful.

1 ACCEPTED SOLUTION

NAG
Cirrostratus
Cirrostratus

There is nothing you could do on F5 to solve your problem.

 

Here are the options you have:

 

1) Configure Windows DNS to track failed requests. If failed requests counter crosses certain threshold, stop sending DNS requests to that F5 DNS node, send all requests to the other F5 node and generate a Alert that one of the F5 DNS node is down.

 

2) If Windows DNS is not smart enough to do health monitoring, make it smart. For example, write a power-shell script to regularly check F5 DNS service availability

 

Hope this helps,

Nag

 

View solution in original post

1 REPLY 1

NAG
Cirrostratus
Cirrostratus

There is nothing you could do on F5 to solve your problem.

 

Here are the options you have:

 

1) Configure Windows DNS to track failed requests. If failed requests counter crosses certain threshold, stop sending DNS requests to that F5 DNS node, send all requests to the other F5 node and generate a Alert that one of the F5 DNS node is down.

 

2) If Windows DNS is not smart enough to do health monitoring, make it smart. For example, write a power-shell script to regularly check F5 DNS service availability

 

Hope this helps,

Nag