irule for logging DNS queries to the load balancer?

Hi Michael,

 

 

Many thanks for the reply - you've confirmed my suspicions that I'd have to modify named.conf to include a logging section. Unfortunately I am very wary of doing this on our production load balancers due to the sheer number of queries they handle per second, i can imagine the logs filling up within minutes.

 

 

I think what i may do in this case is set up a mirror port on the external interface of the load balancer and simply snoop for DNS traffic - it's ugly and will require some analysis to get the data out, but it'll work and it won't affect the load balancer performance. Thanks for the replies guys!