BIG-IP DNS DNSSEC and DKIM

[SolarJeans]

Hi Everyone,

I am new for F5 DNS. I would like to do the DKIM and DNSSEC in Zones.

I check this link (https://support.f5.com/csp/article/K30222115)  for DKIM configured, will DKIM support 255 characters?

I try to import + but it said not support.

Same as DNSSEC, will it support all 255 characters?

[Nikoolayy1]

If you read the error it does not say that your record is too long but that it has bad characters and with using google you will find the f5 article for the error:

https://support.f5.com/csp/article/K20940935

Also check this just in case as you may need to upgrade your version:

https://cdn.f5.com/product/bugtracker/ID719704.html

If you want to use the F5 GSLB and sign the DNS traffic with DNSSEC or DNS Express Zone Transfer then better read the article below as  then the DNSSEC zones configuration are used:

https://techdocs.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-dns-services-implementati...

Also check the F5 cache options if you are using the F5 as a validating resolver:

https://techdocs.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-dns-services-implementati...

[Nikoolayy1 · Accepted solution]

Hello,

If my answer helped you can mark it as solution? If not, please share what was the actual solution as I am interested.

[SolarJeans]

Thank you