F5 GTM/DNS - EDNS RFC COMPLIANCE

F5 DNS - EDNS RFC Compliance

¿Que es el DNS Flag Day?

El día en el que veremos internet arder (el apocalipsis)….

El 01 de febrero de 2019 cuatro de los principales proveedores de DNS Resolver, realizarán un lanzamiento de su software con una característica en común; la cual, es que se manejará el estándar EDNS de forma estricta. Esto presenta el fin de parches temporales históricos que perdonaban ciertas conductas desviadas del estándar en los servidores DNS autoritativos.

Dentro de los problemas que se tienen se encuentran:

DNS autoritativos que bloquean respuestas.
Malas implementaciones de DNS que no siguen los estándares.
Protecciones de seguridad (Firewalls, IDS/IPS, etc) mal implementados o con malas practicas que bloquean el trafico que sigue el estándar.
Los Resolver deben esperar timeout y reintentar con TCP y sin EDNS.

Por estos días algunos DNS públicos (Google, Facebook, PowerDNS, CloudFlare, Quad9, Cisco, etc) también realizaran estos cambios.

¿Qué es EDNS RFC 6891?

Define un mecanismo compatible con DNS para indicar soporte para nuevas opciones incluyendo soporte para paquetes más grandes (sobre 512 bytes), más códigos de respuesta, etc.

¿Para qué sirve EDNS?

Es requerido para para que funcionen las siguientes extensiones:

NSID -- RFC 5001: identificación de instancia del servidor
DNSSEC -- bit DO: por favor, responda con registros DNSSEC
Client-subnet, RFC 7871: desde qué red viene esta consulta?
Keep-alive, RFC 7828: timeout variable para DNS sobre TCP.
Cookies, RFC 7873: mecanismo liviano de seguridad.
Las nuevas extensiones y funcionalidades que en el futuro se puedan adicionar...

¿Qué impacto tiene este cambio sobre el modulo GTM/DNS de F5?

Dado que el servicio de GTM/DNS de F5 es un servicio de DNS y una de sus implementaciones es responder de forma autoritativa, éste debe seguir el estándar DNS y cumplir de forma estricta los RFC’s que definen el servicio.

Por esto se hace necesario realizar una validación de los servicios que pasan por F5 GTM/DNS con el fin de prevenir una posible afectación del servicio.

This entry was posted by jduque in category F5 and tagged dns, dns flag day, gtm, edns, f5, ngeek on Miércoles, 16 Enero 2019 23:40 in blog Ngeek Blog

Rating 0 0.

Bookmark

23069 responses found

DanielfupMR on Viernes, 13 Enero 2023 06:06 said:

pharmacy in canada for viagra canadian pharmacies that are safe
https://withoutprescriptions.store/# canadian rx pharmacy online
[url=https://withoutprescriptions.store/#]buying prescription drugs in mexico[/url] top online canadian pharmacies

0 0

Candra on Viernes, 13 Enero 2023 05:23 said:

I am extremely impressed with your writing skills and also with the layout on your blog.
Is this a paid theme or did you customize it yourself?
Anyway keep up the excellent quality writing, it is rare to see a nice blog like this one these days.

0 0

Elijah on Viernes, 13 Enero 2023 05:17 said:

I'm not positive where you're getting your info,
however good topic. I must spend a while studying much more or working out more.
Thank you for magnificent info I was on the lookout for
this info for my mission.

0 0

Nydia on Viernes, 13 Enero 2023 05:07 said:

I'm really enjoying the design and layout of your blog.
It's a very easy on the eyes which makes it much more
enjoyable for me to come here and visit more often. Did you
hire out a developer to create your theme?
Superb work!

0 0

Lucretia on Viernes, 13 Enero 2023 05:02 said:

Thanks for every other informative web site. Where else may I am getting that
type of info written in such an ideal method? I have a project
that I'm simply now running on, and I've been at the look out for
such info.

0 0

DanielfupMR on Viernes, 13 Enero 2023 04:55 said:

my canadian pharmacy reputable canadian mail order pharmacies
https://canadianpharmacy.icu/# reputable canadian pharmacy
[url=https://withoutprescriptions.store/#]online pharmacies without an rx[/url] canada pharmacies online pharmacy

0 0

Shonda on Viernes, 13 Enero 2023 04:25 said:

Hello to all, how is the whole thing, I think every one is getting more from this web site,
and your views are pleasant designed for new viewers.

0 0

Carlos on Viernes, 13 Enero 2023 03:58 said:

I for all time emailed this website post page to all my associates, for the reason that if like to read it
after that my links will too.

0 0

Marisa on Viernes, 13 Enero 2023 03:50 said:

Hi are using Wordpress for your blog platform? I'm new to the blog world but I'm trying to get started and create my own. Do you require any html coding knowledge to make your own blog?
Any help would be greatly appreciated!

0 0

Marita on Viernes, 13 Enero 2023 03:36 said:

0 0

Lydia on Viernes, 13 Enero 2023 03:09 said:

What's up, after reading this awesome piece of writing i am too happy to share my knowledge here with colleagues.

0 0

Bradley on Viernes, 13 Enero 2023 03:07 said:

Thanks for your personal marvelous posting!
I definitely enjoyed reading it, you might be a great author.I will always bookmark
your blog and will come back later on. I want to
encourage one to continue your great posts, have a nice afternoon!

0 0

Julian on Viernes, 13 Enero 2023 02:25 said:

I like the valuable info you provide in your articles.

I'll bookmark your blog and check again here regularly.
I'm quite certain I'll learn a lot of new stuff right here!

Best of luck for the next!

0 0

Luciana on Viernes, 13 Enero 2023 02:05 said:

It's very effortless to find out any matter on web as compared to textbooks,
as I found this article at this website.

0 0

Micheal on Viernes, 13 Enero 2023 00:54 said:

Excellent post. I used to be checking continuously this weblog and I'm impressed!

Very helpful information specially the ultimate section :) I deal
with such info much. I was looking for this particular info for a very lengthy time.
Thanks and good luck.

0 0

Deloras on Jueves, 12 Enero 2023 23:49 said:

This information is worth everyone's attention. How
can I find out more?

0 0

FrankhoaftGJ on Jueves, 12 Enero 2023 23:39 said:

best canadian pharmacy to order from canadian pharmacy viagra or canadian pharmacy phone number
http://www.google.mu/url?q=https://canadianpharmacy.icu legitimate canadian online pharmacies
[url=http://framefit.biz/__media__/js/netsoltrademark.php?d=canadianpharmacy.icu]legit canadian pharmacy[/url] reputable canadian pharmacy and [url=http://www.bhnet.net/home.php?mod=space&uid=171416]reputable canadian pharmacy[/url] canadian family pharmacy

0 0

Danielle on Jueves, 12 Enero 2023 23:23 said:

Generally I don't learn article on blogs, but I wish to
say that this write-up very pressured me to check out and do it!

Your writing taste has been surprised me. Thank you, very great article.

0 0

Woodrow on Jueves, 12 Enero 2023 22:47 said:

0 0

DarrellVubPD on Jueves, 12 Enero 2023 22:21 said:

https://canadianpharmacy.icu/# canadian mail order pharmacy

0 0

F5 GTM/DNS - EDNS RFC COMPLIANCE - DNS FLAG DAY

Contáctenos

Siguenos