Brocade Communications Systems 12.4.00 Displaying transparent DNS query intercept statistics

Models: 12.4.00

1 267
Download 267 pages 21.85 Kb
Page 113
Image 113

Transparent DNS query intercept

1

NOTE

For non-direct respond transparent intercept, you should not enable dns transparent-interceptin the gslb policy.

Notice that unlike the types of transparent DNS query intercept shown in “Redirecting queries” on page 97, the type shown here does not require configuration of a real server. Since the ServerIron ADX in this case is responding directly to the query instead of redirecting the query to another device, only the virtual server for intercepting the queries is required. Moreover, since the ServerIron ADX is not redirecting the queries, you do not need to configure a source IP address and enable source NAT.

Syntax: host-info<host-name> ip-list { <ipv4-address> <ipv6-address> }

This command specifies the IPv4 or IPv6 addresses you want the ServerIron ADX to use in its replies to the intercepted DNS queries. You can specify as many addresses as you need. Separate each address with a space.

The ServerIron ADX applies the GSLB policy to the addresses and sends only the best address in the response to a client query. If the GSLB policy does not result in a best address to send to the client, the ServerIron ADX forwards the request to the authoritative DNS server. In either case, the source IP address in the response is the DNS server IP address, so the client always receives a response that appears to be from the DNS server.

Syntax: dns transparent-intercept

This command enables the DNS transparent intercept feature. You need to use this command only when you are configuring the type of transparent DNS query intercept that responds directly to the client. If you are configuring the type of transparent DNS query intercept that redirects the query to an alternative DNS server or to another ServerIron ADX, do not use this command.

For information about the other commands, refer to “Redirecting queries” on page 97.

Displaying transparent DNS query intercept statistics

To display transparent DNS query intercept statistics, enter the following command at any level of the CLI.

ServerIronADX(config)# show gslb global-stat

DNS cache proxy stat:

=

0

 

 

 

Direct response

 

 

 

DNS query intercept stat:

0

Direct response

=

0

Redirect

=

Unsupported query types stat:

0

 

 

 

Error handling cnt

=

 

 

 

Syntax: show gslb global-stat

The transparent DNS query intercept statistics are displayed in the DNS query intercept stat section.

ServerIron ADX Global Server Load Balancing Guide

101

53-1002437-01

 

Page 113
Image 113
Brocade Communications Systems 12.4.00 manual Displaying transparent DNS query intercept statistics