Forum Discussion

Zdenda's avatar
Zdenda
Icon for Cirrus rankCirrus
Feb 18, 2020

DNS through prod interface

Hello, we use pool members defined through FQDN.

So far we have used DNS set in system/configuration/device/DNS, it works fine, F5 communicates through mgmt interface with the DNS server.

 

Can we send DNS queries through production interface instead of management? I know it might be done through iRule (old concept of using FQDN pool members), but I would like to avoid any irules. Is there any other trick?

 

Thanks,

Zdenek

3 Replies

  • DNS queries should follow the routing table that has been configured on the device. Do you have a management route defined for DNS that will send these requests over the mgmt interface...?

     

    tmsh list sys management-route

     

  • There is default route and couple of static for our central management stuff etc. Since DNS is part of system settings I guess it uses management port as default. Do you think we could override it by using /32 route in TMOS (in some partition)?

  • Hi

    Yes, a /32 route should take precedence and work ok