F5 GTM/DNS - EDNS RFC COMPLIANCE

F5 DNS - EDNS RFC Compliance

¿Que es el DNS Flag Day?

El día en el que veremos internet arder (el apocalipsis)….

El 01 de febrero de 2019 cuatro de los principales proveedores de DNS Resolver, realizarán un lanzamiento de su software con una característica en común; la cual, es que se manejará el estándar EDNS de forma estricta. Esto presenta el fin de parches temporales históricos que perdonaban ciertas conductas desviadas del estándar en los servidores DNS autoritativos.

Dentro de los problemas que se tienen se encuentran:

DNS autoritativos que bloquean respuestas.
Malas implementaciones de DNS que no siguen los estándares.
Protecciones de seguridad (Firewalls, IDS/IPS, etc) mal implementados o con malas practicas que bloquean el trafico que sigue el estándar.
Los Resolver deben esperar timeout y reintentar con TCP y sin EDNS.

Por estos días algunos DNS públicos (Google, Facebook, PowerDNS, CloudFlare, Quad9, Cisco, etc) también realizaran estos cambios.

¿Qué es EDNS RFC 6891?

Define un mecanismo compatible con DNS para indicar soporte para nuevas opciones incluyendo soporte para paquetes más grandes (sobre 512 bytes), más códigos de respuesta, etc.

¿Para qué sirve EDNS?

Es requerido para para que funcionen las siguientes extensiones:

NSID -- RFC 5001: identificación de instancia del servidor
DNSSEC -- bit DO: por favor, responda con registros DNSSEC
Client-subnet, RFC 7871: desde qué red viene esta consulta?
Keep-alive, RFC 7828: timeout variable para DNS sobre TCP.
Cookies, RFC 7873: mecanismo liviano de seguridad.
Las nuevas extensiones y funcionalidades que en el futuro se puedan adicionar...

¿Qué impacto tiene este cambio sobre el modulo GTM/DNS de F5?

Dado que el servicio de GTM/DNS de F5 es un servicio de DNS y una de sus implementaciones es responder de forma autoritativa, éste debe seguir el estándar DNS y cumplir de forma estricta los RFC’s que definen el servicio.

Por esto se hace necesario realizar una validación de los servicios que pasan por F5 GTM/DNS con el fin de prevenir una posible afectación del servicio.

This entry was posted by jduque in category F5 and tagged dns, dns flag day, gtm, edns, f5, ngeek on Miércoles, 16 Enero 2019 23:40 in blog Ngeek Blog

Rating 0 0.

Bookmark

23300 responses found

Philipp on Domingo, 03 Diciembre 2023 20:56 said:

Thanks a lot for sharing this with all of us you
actually recognise what you're speaking about! Bookmarked.

Kindly also discuss with my web site =). We may have a link
alternate contract among us

0 0

Bryon on Domingo, 03 Diciembre 2023 20:29 said:

Spot on with this write-up, I really think this
web site needs far more attention. I'll probably be returning to read more,
thanks for the advice!

0 0

Stephanie on Domingo, 03 Diciembre 2023 19:38 said:

I pay a quick visit everyday some websites and sites to read posts, but this webpage gives quality based writing.

0 0

Kirby on Domingo, 03 Diciembre 2023 18:50 said:

I go to see every day a few websites and sites to read articles, except this web
site gives quality based articles.

0 0

Gus on Domingo, 03 Diciembre 2023 18:19 said:

I do agree with all the ideas you've offered for your post.
They are very convincing and can certainly work.
Still, the posts are too quick for newbies.

May just you please extend them a little from subsequent
time? Thank you for the post.

0 0

Serena on Domingo, 03 Diciembre 2023 18:12 said:

I am really enjoying the theme/design of your weblog.
Do you ever run into any internet browser compatibility problems?
A number of my blog visitors have complained about my website not
operating correctly in Explorer but looks great in Chrome.
Do you have any recommendations to help fix this issue?

0 0

Helen on Domingo, 03 Diciembre 2023 18:10 said:

Fantastic items from you, man. I've consider your stuff prior to and you're just extremely excellent.
I actually like what you've obtained here, certainly like what you are saying
and the best way through which you assert it. You are making it enjoyable and you still
care for to stay it smart. I can't wait to learn much more from you.
That is actually a tremendous website.

0 0

Lashawnda on Domingo, 03 Diciembre 2023 18:00 said:

I have read so many content concerning the blogger lovers
however this piece of writing is in fact a good post,
keep it up.

0 0

Leonora on Domingo, 03 Diciembre 2023 17:57 said:

great points altogether, you simply won a new reader.
What could you suggest in regards to your submit that you just made a few days ago?
Any positive?

0 0

Rudolph on Domingo, 03 Diciembre 2023 17:49 said:

An impressive share! I've just forwarded this onto a friend who has been doing a little research on this.
And he actually ordered me dinner simply because I stumbled upon it for him...
lol. So allow me to reword this.... Thank YOU for the
meal!! But yeah, thanx for spending some time to talk about
this topic here on your web site.

0 0

Reina on Domingo, 03 Diciembre 2023 17:31 said:

We are a groyp of volunteers and starting a new scheme in our community.

Your website offered us with useful info to work on. You
havee performed a formidable job and oour whole group might be thankful to
you.

0 0

Suzette on Domingo, 03 Diciembre 2023 16:52 said:

I have read so many posts concerning the blogger lovers except this article is in fact a nice post, keep it up.

0 0

Ashlee on Domingo, 03 Diciembre 2023 16:43 said:

I am regular reader, how are you everybody? This post posted at this web
site is really nice.

0 0

Angel on Domingo, 03 Diciembre 2023 16:30 said:

hello there and thank you for your information ? I?ve certainly picked up
something new from right here. I ddid however expertise some technical issues using
this site, since I experienced to reload the site many
times previous to I could geet it to load properly.
I had been wonderin if your hosting is OK? Not that I am
complaining, but slow loading instances times will sometimes affect yokur placement
in google annd can damage your quality score if advertising and marketing with
Adwords. Anyway I am adding ths RSS to my e-mail and can look out for much more of
your respective interewsting content. Make sure you update this again very soon..

0 0

Raul on Domingo, 03 Diciembre 2023 16:15 said:

Thank you a lot for sharing this with all of us you really realize what
you are speaking about! Bookmarked. Please also talk over with my website =).

We could have a link change arrangement between us darkmarket list https://darknetmarketslist.com

0 0

Wendi on Domingo, 03 Diciembre 2023 15:48 said:

Howdy! I just wish to give you a huge thumbs up for the excellent information you've got here on this post.
I will be returning to your web site for more soon.

0 0

Rafaela on Domingo, 03 Diciembre 2023 15:47 said:

Hi, after reading this amazing paragraph i am also
glad to share my knowledge here with colleagues.

0 0

Amie on Domingo, 03 Diciembre 2023 15:31 said:

This paragraph will assist the internet viewers for building up new web site
or even a blog from start to end.

0 0

Chelsea on Domingo, 03 Diciembre 2023 15:22 said:

We are a group of volunteers and starting a new scheme in our community.

Your website provided us with valuable info to work on. You have done a formidable job
and our entire community will be thankful to you.

0 0

Madeleine on Domingo, 03 Diciembre 2023 14:51 said:

Hey! Someone in my Facebook group shared this site with us so I came to check it out.
I'm definitely enjoying the information. I'm book-marking and will
be tweeting this to my followers! Wonderful blog and amazing design.

0 0

F5 GTM/DNS - EDNS RFC COMPLIANCE - DNS FLAG DAY

Contáctenos

Siguenos