15-Sep-2020 02:21
Hi;
Do I need a GTM license for this irule? if yes, how can this irule be re-written so that it can be appended to a DNS Virtual Server with a DNS profile but without a GTM license:
when DNS_REQUEST {
if {[DNS::question type] equals "SRV" && [string tolower [DNS::question name]] equals "_kerberos._tcp.default-first-site-name._sites.dc._msdcs.learnish.net"}{
set new_rr_1 [DNS::rr "_kerberos._tcp.default-first-site-name._sites.dc._msdcs.learnish.net 86400 IN SRV 0 100 88 dc01.learnish.net"]
set new_rr_2 [DNS::rr "dc01.learnish.net" A IN 3600 "10.10.20.109"]
DNS::answer insert $new_rr_1
DNS::additional insert $new_rr_2
DNS::return
}
}
Kindly
Wasfi
Solved! Go to Solution.
16-Sep-2020 15:55
This is an often confusing issue on two fronts: licensing AND functionality. iRules for GTM and iRules for LTM are not the same, even if they share similarities.
The iRule you show above is already an LTM iRule. We can know this by using the context clues in the iRule by what commands are in use. If you review the DNS namespace for iRules on Clouddocs, you'll see that whereas DNS_REQUEST, DNS::question, and DNS::rr are available in both GTM and LTM, DNS::answer, DNS::additional, and DNS::return are available in LTM only.
So to answer your question...no, you do not need a GTM license to use this iRule if you already have a DNS Services license, and it should only need to be tailored to your needs as it is already an LTM iRule.
16-Sep-2020 15:55
This is an often confusing issue on two fronts: licensing AND functionality. iRules for GTM and iRules for LTM are not the same, even if they share similarities.
The iRule you show above is already an LTM iRule. We can know this by using the context clues in the iRule by what commands are in use. If you review the DNS namespace for iRules on Clouddocs, you'll see that whereas DNS_REQUEST, DNS::question, and DNS::rr are available in both GTM and LTM, DNS::answer, DNS::additional, and DNS::return are available in LTM only.
So to answer your question...no, you do not need a GTM license to use this iRule if you already have a DNS Services license, and it should only need to be tailored to your needs as it is already an LTM iRule.
16-Sep-2020 16:19
Hi Jason;
Thank you kindly for your response. This makes things clearer. Two queries around this if you don't mind:
Kindly
Wasfi
16-Sep-2020 16:39
For viprion, I believe you need to have the host licensed and then any guest can use it.
Select as Best is the way you can choose my answer.
Note that you CAN make DNS decisions without a DNS services license, but it will require you to dig into the binary in a TCP or UDP payload (depending on how the DNS packets flow in your infrastructure). Example here in the codeshare. DO NOT apply this as is, it's very old and uses global variables. I share it only as an example of what's possible if you don't want to purchase the license. But know that the built-in DNS functionality is way more performant and reliable.
16-Sep-2020 16:49
Thank you Sir.