For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

jesusangel's avatar
jesusangel
Icon for Altostratus rankAltostratus
Nov 16, 2022

DNS: reply from unexpected source

Hi, Firstly, I must say that I am a complete newbie when it comes to BIG-IP products. On the other hand, the load balancer was configured by experts, so I am pretty confident that they made a reason...
application delivery
dns
snat
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Nov 17, 2022

So to be clear, some clients will get DNS by making a request to a BIG-IP VIP (2.2.2.2), and other clients will go directly to the DNS server (3.3.3.4), by going around the BIG-IP? And as the DNS server uses a BIG-IP self-IP as its gateway, you would expect all return traffic to return through the BIG-IP?

Is there more than one DNS server, and is there any chance that one of those servers has a static route applied for some client IP subnet that doesn't pass back through the BIG-IP?

jesusangel's avatar
jesusangel
Icon for Altostratus rankAltostratus
Nov 17, 2022

Sorry, I forgot to mention that there are two DNS servers (3.3.3.4 and 3.3.3.5).