You can configure DNS ExpressTM
Local Traffic ManagerTM
to mitigate distributed denial-of-service attacks (DoS) and improve performance of both the local BIND server on the BIG-IP system and any back-end DNS servers.
DNS Express provides the ability for a BIG-IP system to act as a
high-speed, authoritative secondary DNS server. This allows the system to:
To configure DNS Express, you use the BIG-IP Configuration utility to
create a DNS profile, and then configure a DNS Express TSIG key and a DNS Express zone. You also assign the DNS profile to a virtual server.
To create a DNS profile, from the Main tab, expand Local Traffic
, click Profiles
, and from the Services menu, choose DNS.