Configuring Protocol Validation and Response Cache

Manual Chapter : Configuring Protocol Validation and Response Cache

Applies To:

Show Versions

BIG-IP LTM

13.1.5, 13.1.4, 13.1.3, 13.1.1, 13.1.0

BIG-IP DNS

13.1.5, 13.1.4, 13.1.3, 13.1.1, 13.1.0

Overview: Configuring Protocol Validation and Response Cache

You can configure Protocol Validation so that responses, both authoritative and non-authoritative, are cached to hardware in order to mitigate against random source flood attacks. By configuring DNS Response Cache to offload/accelerate commonly requested entries in hardware, entries can still be responded to when the software is overwhelmed.

If you have a DNS Services rate-limited license, Response Cache is automatically disabled.

Task summary

Perform these tasks to configure DNS in order to accelerate DNS responses in hardware:

Enabling a bitstream

Ensure you are using a VIPRION^® platform that supports FPGA firmware.

Enable the intelligent bitstream as part of the process to configure Protocol Validation and Response Cache.

On the Main tab, click System > Resource Provisioning .
For the FPGA Firmware Selection setting, select the l7-intelligent-fpga check box.

Note: This setting is hidden if the appropriate hardware is not present.
Click Submit.

Supported platforms for FPGA firmware selection

Platform family	Platform model
VIPRION^®	B2250 blade
VIPRION	C2200 chassis
VIPRION	C2400 chassis

Note: Hardware DNS features are only available on platforms that support Altera FPGA, including Vic2 and later platforms.