We had a DNS DDoS attack that caused the Big-IP to run out of resources due to port exhaustion. Is there a way to help mitigate this sort of attack in the future by possible limited the amount of request on the Big_IP DNS (GTM)?
Where did the port exhaustion occur?
Yes, you can. AFM can help you with that, or IPI.