Manual Chapter :
Managing GSLB Topology Records
Applies To:
Show Versions
BIG-IQ Centralized Management
- 8.3.0, 8.2.0, 8.1.0, 8.0.0, 7.1.0
Managing GSLB Topology Records
How do I manage permissions for DNS GSLB
objects?
F5 BIG-IQ Centralized Management makes it
straightforward for you to manage permissions that allow users to view only
the specific DNS GSLB objects you assign to them.
To provide permissions for a specific set of objects, you complete these
tasks.
- Add a custom resource group- In this task, you specify the GSLB objects that you want this user to work with. You create a resource group for each collection of objects that you want to assign to a user.
- Add a custom role- Next, you associate the GSLB Viewer role type with the resource groups that contain the objects you want your delegates to view. For example, if you had a resource group made up of two wide IPs, one namedSeattlePrimeand the other namedSeattleSecond, you might name this roleviewSeattle.
- Add a custom user- Finally, you create a user and assign a custom role to that user. The role gives that user permissions to view the objects that belong to the objects in the resource group. In the current example, you could assign your custom user to theviewSeattlerole to give that user the ability to view the GSLB objects in the two Seattle wide IPs.
For step-by-step guidance on each of these tasks, refer to
How do I give users
customized permissions to specific BIG-IP resources based on their job
responsibilities?
on support.f5.com
.How do I manage GSLB
topology records in BIG-IQ?
Topology regions define a specific geographical location that has meaning
for your network. These regions are especially useful in conjunction with topology records to
improve the efficiency of your load balancing.
The workflows are very
similar for creating a new GSLB topology record or for changing the settings
for a GSLB topology record that already resides on devices in a managed sync group. In each case, there are four tasks to perform.
This figure illustrates the workflow to manage the topology
records in a sync group. Changing the settings or creating the topology record is the second
step in this process.
Change GSLB topology
record workflow
You can view the GSLB topology records configured for the DNS sync groups
you manage by navigating to . From there, click a record to edit it, or click
Create
to set up a new one.View GSLB objects
Before you can use a BIG-IQ to manage DNS GSLB objects on a managed device, you must configure at least one Datacenter on that device using the BIG-IP user interface.
When you use F5 BIG-IQ Centralized Management to manage your DNS sync group, you can view the GSLB objects that are defined on devices in the sync group.
- At the top of the screen, clickConfiguration.
- On the left, click , and then select the object type that you want to view.The screen displays a list of the selected object type that are defined on devices managed by this BIG-IQ system. For each object (except iRules, topology records, or topology regions), icons describe the health status and availability.
- To view overview information about a particular object, select the check box for that object.An overview panel and a related items panel display for this object.
- To see a list of related items for a GSLB object:
- Select the check box for that object.
- In the Related Items panel, clickShow.You can view the list of related items; and, for many of the items, you can click a link to view properties for that item.
- To view the general properties for a GSLB object, click the name of that object.The screen displays the properties for the selected object.
Create a GSLB
topology record
You create a GSLB topology record to define a set
of characteristics that maps the origin of a DNS name resolution request to a
destination.
- At the top of the screen, clickConfiguration, then, on the left, click .The screen displays a list of topology records defined on this device.
- ClickCreate.The New Topology Record screen opens.
- Select aSync Groupfor the topology record.
- Specify theLDNS Request Sourcefor incoming DNS requests.The options for theRequest SourceandDestinationmatching methods are dynamic, and change based on how you have configured the system
- Select an origination type and provide the applicable information.
- ForIs/Is Not:, specify whether you want the system to select this topology record, either when the request source matches (is), or when it does not match (is not).
- Specify theDestinationto which the system directs the incoming DNS request.
- Select an destination type and provide the applicable information.
- ForIs/Is Not:, specify whether you want the system to select this topology record, either when the destination matches (is), or when it does not match (is not).
- Specify theWeightof the topology record.The system finds the weight of the first topology record that matches the server object (pool or pool member) and the local DNS.
- ClickSave & Close.The system creates the new topology record and adds it to the list of topology records.
Changes that you make are
made only to the pending version. The
pending version
serves as a repository for changes you stage before deploying them to the managed device.
Object settings for the pending version are not the same as the object settings on the
actual BIG-IP device until they are deployed or discarded. When you finish specifying the settings for
this topology record, you need to evaluate and then deploy the changes to
devices in the sync group. Until you deploy the changes stored in the pending version,
objects on the devices in the sync group are not changed.
Edit a GSLB
topology record
You can view and modify the properties for
existing GSLB topology records. Since you are working with an existing topology record,
you can modify only the
Weight
setting. - At the top of the screen, clickConfiguration, then, on the left, click .The screen displays a list of topology records defined on this device.
- Click the name of the topology record you want to edit.Unless noted here, the parameters on this screen perform the same function as they do when you configure a topology record on a BIG-IP device. For details about the purpose or function of a particular setting, refer to the BIG-IP system reference information onsupport.f5.com.The screen displays the current settings for the selected topology record.
- Revise theWeightsettings that you want to revise and then, when your edits are complete, clickSave & Close.
Changes that you make are
made only to the pending version. The
pending version
serves as a repository for changes you stage before deploying them to the managed device.
Object settings for the pending version are not the same as the object settings on the
actual BIG-IP device until they are deployed or discarded. When you finish revising the settings for
this topology record, you need to evaluate and then deploy the changes to
devices in the sync group. Until you deploy the changes stored in the pending version,
objects on the devices in the sync group are not changed.
