Zone-transfer to a Wide-IP and iRules
Hi, how's it going? I've deployed two DNS on different DC's (a classical 2 DC's internally interconnected, so BIG-IP A can reach what's behind BIG-IP B and viceversa). All wide-IP's resolve to a public IP address. This is OK, but there are internal client who query for those names, but need to receive an internal address. This is also no problem, can be solved using an iRule for internal addresses. Now, the problem is here: an interesting number of these internal clients reside on a geographically remote location, but need to be resolved to this internal address. Again, this wouldn't be a problem for the F5 configuration, but we don't want to have a super high traffic through the MPLS (or whatever it is that interconnect the remote locations). Each geographic zone has a local AD-DNS, and I've been thinking that, maybe, they could do an AXFR to the BIG-IP, so to reduce the traffic and confine it to each place. So: Is it posible to perform an AXFR for the wide-IP's? (Not for the names configured in bind, not for the names behind the F5). If it indeed is, how could I configure the F5's so they reply with an internal zone? Would we be better off using the AD-DNS cache instead? Thanks in advance!
Setup GTM as a DNS relay and cache
Hello, I am trying to setup GTM 11.5.4 as a DNS relay and cache only meaning all DNS queries go through the GTM and are forwarded to our DNS servers. Have anyone managed to do this ? Is this possible using GTM only (without LTM) ? All guides on F5 page seems to be incomplete or contain contradictory information. Thanks a lot
Redirect DNS VS Caching to another VS w/o caching
guys, i have this customer problem wherein they have an F5 used as a DNS Transparent cache, this worked well. However they have clients that uses the same F5 DNS VS ( transparent cache) wherein any request/s coming from this group of clients need not to be cached, it goes directly to the DNS resolver. I have this iRule applied on the DNS VS (transparent cache) , however this works only on the first request and it gets redirected to the NO-CACHE_DNS_VS,but the 2nd and succeeding request still goes to the DNS_VS when DNS_REQUEST { if { [class match [IP::client_addr] equals Special_Clients] } { virtual NO-CACHE_DNS_VS } } How to make the succeeding DNS requests still persists on the other VS ( NO-CACHE_DNS)?
