Manual Chapter :
Configuring Protocol Validation and Response Cache
Applies To:
Show Versions
BIG-IP LTM
- 17.1.1, 17.1.0, 17.0.0, 16.1.4, 16.1.3, 16.1.2, 16.1.1, 16.1.0, 16.0.1, 16.0.0, 15.1.9, 15.1.8, 15.1.7, 15.1.6, 15.1.5, 15.1.4, 15.1.3, 15.1.2, 15.1.1, 15.1.0, 15.0.1, 15.0.0, 14.1.5, 14.1.4, 14.1.3, 14.1.2, 14.1.0
BIG-IP DNS
- 17.1.1, 17.1.0, 17.0.0, 16.1.4, 16.1.3, 16.1.2, 16.1.1, 16.1.0, 16.0.1, 16.0.0, 15.1.9, 15.1.8, 15.1.7, 15.1.6, 15.1.5, 15.1.4, 15.1.3, 15.1.2, 15.1.1, 15.1.0, 15.0.1, 15.0.0, 14.1.5, 14.1.4, 14.1.3, 14.1.2, 14.1.0
Configuring Protocol Validation and Response Cache
Configuring Protocol Validation and Response Cache
You can configure Protocol Validation so that responses, both authoritative and non-authoritative, are cached to hardware in order to mitigate against random source flood attacks. By configuring DNS Response Cache to offload/accelerate commonly requested entries in hardware, entries can still be responded to when the software is overwhelmed.
If you have a DNS Services rate-limited license, Response Cache is automatically disabled.
Enable a bitstream
Ensure you are using a VIPRION platform that supports FPGA firmware.
Enable the intelligent bitstream as part of the process to configure Protocol Validation and Response Cache.
- On the Main tab, click .
- For theFPGA Firmware Selectionsetting, select thel7-intelligent-fpgacheck box.This setting is hidden if the appropriate hardware is not present.
- ClickSubmit.
Supported platforms for FPGA firmware selection
Platform family | Platform model |
|---|---|
VIPRION | B2250 blade |
VIPRION | C2200 chassis |
VIPRION | C2400 chassis |
Hardware DNS features are only available on platforms that support Altera FPGA, including Vic2 and later platforms.
Configure Protocol Validation and Response Cache in a DNS profile
Ensure that the BIG-IP system has a DNS Services license.
Configure Protocol Validation for dropping malformed packets and Response Cache to offload/accelerate commonly asked entries in hardware.
- On the Main tab, click .The DNS list screen opens.
- In the name column, click the system-supplieddnsprofile.The DNS properties list screen opens.
- In the Hardware Acceleration area, from theProtocol Validationlist, selectEnabled.
- From theResponse Cachelist, selectEnabled.
- ClickUpdate.
Apply a DNS profile to a listener
Apply a DNS profile as part of the process to configure Protocol Validation and Response Cache.
- On the Main tab, click .The Listeners List screen opens.
- In theNamecolumn, click the name of a listener you want to modify.
- In the Service area, for theDNS Profilesetting, select thednsprofile.When the listener is defined from the BIG-IP LTM Virtual Server page, select theudp_gtm_dnsprofile.
- ClickUpdate.
