Forum Discussion

SANTS_boy_18328's avatar
SANTS_boy_18328
Icon for Nimbostratus rankNimbostratus
Jun 24, 2015

How to have a GTM with multiple Listeners where each only replies to specific Wide IPs

Hi,

 

we have a GTM with multiple Listeners (that are in different Route Domains).

 

What we currentlly have is:

 

  • User that arrives with DNS request at listener IP 1.1.1.1 is able to resolve aaa.com & bbb.com
  • User that arrives with DNS request at listener IP 2.2.2.2 is able to resolve aaa.com & bbb.com

What we would like to do is the following:

 

  • User that arrives with DNS request at listener IP 1.1.1.1 is only able to resolve aaa.com and nothing else
  • User that arrives with DNS request at listener IP 2.2.2.2 is only able to resolve bbb.com and nothing else

There is a way to assign Wide IPs to specific Listener IPs only?

 

Thanks a lot.

 

Regards,

 

SANTS boy

 

3 Replies

  • you can use an iRule to do that (assign to the listener, not to the wideIP.) Untested, YMMV.

    when DNS_REQUEST {
      if { ([IP::local_addr] eq "1.1.1.1") and ([DNS::name] ne "aaa.com") } {
        drop
      } elseif { ([IP::local_addr] eq "2.2.2.2") and ([DNS::name] ne "bbb.com") } {
          drop
      }
    }
    
  • Hi,

    as we will need to add lots of resolutions, will this work or all the DNS requests will be dropped? Do I need to put a default statement at the end of each "switch" to allow traffic or without a statement it will do the default behavoir of resolving any DNS request to that Listener?

    Thanks a lot.

    SANTS boy

    when DNS_REQUEST {
        if { ([IP::local_addr] eq "1.1.1.1")
            switch [DNS::name] { 
                aaa.com { drop }
            } 
    
        } elseif { ([IP::local_addr] eq "2.2.2.2")
            switch [DNS::name] { 
                bbb.com { drop } 
            } 
        }
    }