F5 GTM/DNS - EDNS RFC COMPLIANCE

F5 DNS - EDNS RFC Compliance

¿Que es el DNS Flag Day?

El día en el que veremos internet arder (el apocalipsis)….

El 01 de febrero de 2019 cuatro de los principales proveedores de DNS Resolver, realizarán un lanzamiento de su software con una característica en común; la cual, es que se manejará el estándar EDNS de forma estricta. Esto presenta el fin de parches temporales históricos que perdonaban ciertas conductas desviadas del estándar en los servidores DNS autoritativos.

Dentro de los problemas que se tienen se encuentran:

DNS autoritativos que bloquean respuestas.
Malas implementaciones de DNS que no siguen los estándares.
Protecciones de seguridad (Firewalls, IDS/IPS, etc) mal implementados o con malas practicas que bloquean el trafico que sigue el estándar.
Los Resolver deben esperar timeout y reintentar con TCP y sin EDNS.

Por estos días algunos DNS públicos (Google, Facebook, PowerDNS, CloudFlare, Quad9, Cisco, etc) también realizaran estos cambios.

¿Qué es EDNS RFC 6891?

Define un mecanismo compatible con DNS para indicar soporte para nuevas opciones incluyendo soporte para paquetes más grandes (sobre 512 bytes), más códigos de respuesta, etc.

¿Para qué sirve EDNS?

Es requerido para para que funcionen las siguientes extensiones:

NSID -- RFC 5001: identificación de instancia del servidor
DNSSEC -- bit DO: por favor, responda con registros DNSSEC
Client-subnet, RFC 7871: desde qué red viene esta consulta?
Keep-alive, RFC 7828: timeout variable para DNS sobre TCP.
Cookies, RFC 7873: mecanismo liviano de seguridad.
Las nuevas extensiones y funcionalidades que en el futuro se puedan adicionar...

¿Qué impacto tiene este cambio sobre el modulo GTM/DNS de F5?

Dado que el servicio de GTM/DNS de F5 es un servicio de DNS y una de sus implementaciones es responder de forma autoritativa, éste debe seguir el estándar DNS y cumplir de forma estricta los RFC’s que definen el servicio.

Por esto se hace necesario realizar una validación de los servicios que pasan por F5 GTM/DNS con el fin de prevenir una posible afectación del servicio.

This entry was posted by jduque in category F5 and tagged dns, dns flag day, gtm, edns, f5, ngeek on Miércoles, 16 Enero 2019 23:40 in blog Ngeek Blog

Rating 0 0.

Bookmark

23069 responses found

Cary on Martes, 22 Agosto 2023 02:41 said:

What's up, I log on to your new stuff daily. Your humoristic style is awesome, keep up the good work!

0 0

Mai on Martes, 22 Agosto 2023 02:34 said:

Incredible quest there. What happened after? Good luck!

0 0

Elena on Martes, 22 Agosto 2023 02:22 said:

The smallest spend bumps went to unmarried African-American men who had much less education and had
manual labor jobs.

0 0

Chanda on Martes, 22 Agosto 2023 01:57 said:

Peculiar article, exactly what I needed.

0 0

Julio on Martes, 22 Agosto 2023 01:36 said:

Have you ever considered about adding a litftle bit more than just your articles?
I mean, what you say is important and all. But imaginme if you added
some great phottos or ideo clips to give your posts
more, "pop"! Yourr content is excellent but with pics and clips, this blog could
definitely be one of the best in its niche. Wonderful blog!

0 0

Beryl on Martes, 22 Agosto 2023 01:03 said:

Though the app itself has been working decently well of recently.

0 0

HectorJeorkFZ on Martes, 22 Agosto 2023 00:32 said:

You actually mentioned this effectively.
free essay writing service online [url=https://writingpaperforme.com/]websites to type papers[/url] best research paper writers [url=https://custompaperwritersservices.com/]term paper writer[/url] best research paper writers smart custom writing service [url=https://hireawriterforanessay.com/]essay weiter[/url] craigslist essay writer [url=https://theessayswriters.com/]essay help writer[/url] what to write in about me in resume for freshers

0 0

Sharyn on Martes, 22 Agosto 2023 00:02 said:

It's a shame you don't have a donatre button! I'd without a doubt donate to thos superb blog!
I guess for now i'll settle for bookmarking aand adding your RSS feed to my Google account.
I look forward to new updates and wioll share this blog with my Facebook group.
Taalk soon!

0 0

Rowena on Lunes, 21 Agosto 2023 23:57 said:

Its not mmy first time to pay a visit this site, i am visiting this website
dailly and obtain fastidious information from here everyday.

0 0

Faye on Lunes, 21 Agosto 2023 22:36 said:

Greetings! Very helpful advice within this article!
It's tthe little changes which will make the most significant changes.
Thanks a lott for sharing!

0 0

Arlie on Lunes, 21 Agosto 2023 20:50 said:

Hi! This is my first comment here so I just wanted to
give a quick shout out andd say I truly enjoy reading your posts.

Can you recommend aany othger blogs/websites/forums that cover the same
topics? Thank you so much!

0 0

Jed on Lunes, 21 Agosto 2023 20:40 said:

I have been exploring for a bit for any high quality articles or weblog posts in this kind of
space . Exploring in Yahoo I ultimately stumbled upon this website.
Reading this info So i'm satisfied to show that
I have an incredibly just right uncanny feeling
I discovered just what I needed. I so much no doubt will make certain to do not
overlook this site and give it a look regularly.

0 0

Violet on Lunes, 21 Agosto 2023 20:05 said:

Helllo would you mind stating which blog platform you're using?
I'm gojng to start my own blog in the near fuyture but I'm having a tough time selecting
between BlogEngine/Wordpress/B2evolution and Drupal.
The reason I ask is because your design seems different then most blogs and I'm looking for something completely unique.

P.S Apologies for being off-topic but I had to ask!

0 0

Michel on Lunes, 21 Agosto 2023 19:09 said:

Hi! I simply want to offer you a big thumbs up for your
excellent info you have got right here on this post. I am coming back
to your site for more soon.

0 0

HectorJeorkFZ on Lunes, 21 Agosto 2023 17:55 said:

Nicely put. Thank you.
top essay writing [url=https://englishessayhelp.com/]essay helpers[/url] essays help online [url=https://essaywritinghelperonline.com/]help writing college admission essay[/url] essays help online writing a narrative essay [url=https://helpwithdissertationwriting.com/]dissertation help india[/url] professional dissertation help reviews [url=https://dissertationwritingtops.com/]writing an abstract for a dissertation[/url] buy dissertation online

0 0

Mckinley on Lunes, 21 Agosto 2023 16:20 said:

0 0

Darrel on Lunes, 21 Agosto 2023 15:54 said:

Thanks for a marvelous posting! I truly enjoyeed reading it,
you happen to be a great author. I will make sure to bokmark your blog and will come back at some point.
I want to encourage yyou continue your great
writing, have a nice holiday weekend!

0 0

HenrydruriXA on Lunes, 21 Agosto 2023 15:13 said:

darknet tor2door [url=https://tor2doormarketonion.net] tor2door Market [/url] .
What types of goods and services are available on tor2door Market? Are they exclusive or widely accessible elsewhere?

0 0

Gustavo on Lunes, 21 Agosto 2023 14:51 said:

Post writing is also a excitement, iif you be acquainted with after that you can wrote
or else it is complex to write.

0 0

Ruthie on Lunes, 21 Agosto 2023 14:11 said:

Please let me know if you're looking for a article author for your blog.
You have some really good articles and I believe I would be a
good asset. If you ever want to take some of the load
off, I'd love to write some material for your blog in exchange for a link back to mine.
Please blast me an email if interested. Cheers!

0 0

F5 GTM/DNS - EDNS RFC COMPLIANCE - DNS FLAG DAY

Contáctenos

Siguenos