Security::ProfileDNSSecurity

Introduced : BIG-IP_v11.4.0
The ProfileDNSSecurity interface enables you to manipulate DNS Security profiles. DNS Security allows you to filter (drop) DNS packets based on their query type, such as AAAA or NS, or their header opcode, such as QUERY. You can also view the statistics for some (but not all) filters. Note: You attach a DNS Security Profile to a DNS Profile, not to a Virtual Server.

Methods

Method Description Introduced
add_header_opcode_exclusion Adds header opcode exclusions for a set of DNS Security profiles. BIG-IP_v11.4.0
add_query_type_filter Adds query type filters for a set of DNS Security profiles. BIG-IP_v11.4.0
create Creates the specified DNS Security profiles. BIG-IP_v11.4.0
delete_all_profiles Deletes all DNS Security profiles. BIG-IP_v11.4.0
delete_profile Deletes the specified DNS Security profiles. BIG-IP_v11.4.0
get_all_statistics Gets the statistics for all the DNS Security profiles. BIG-IP_v11.4.0
get_description Gets the descriptions for the specified DNS Security profiles. BIG-IP_v11.4.0
get_header_opcode_exclusion Gets the header opcode exclusions for a set of DNS Security profiles. If a header opcode is on this list, all DNS packets with that opcode will be dropped. BIG-IP_v11.4.0
get_list Gets a list of all DNS Security profiles. BIG-IP_v11.4.0
get_query_type_filter Gets the query type filters for a set of DNS Security profiles. BIG-IP_v11.4.0
get_query_type_inclusion_state Gets the DNS Security query type inclusion state for the specified profiles. BIG-IP_v11.4.0
get_statistics Gets the statistics for the specified DNS Security profiles. BIG-IP_v11.4.0
get_version Gets the version information for this interface. BIG-IP_v11.4.0
remove_all_header_opcode_exclusions Removes all header opcode exclusions for a set of DNS Security profiles. BIG-IP_v11.4.0
remove_all_query_type_filters Removes all query type filters for a set of DNS Security profiles. BIG-IP_v11.4.0
remove_header_opcode_exclusion Removes header opcode exclusions for a set of DNS Security profiles. BIG-IP_v11.4.0
remove_query_type_filter Removes query type filters for a set of DNS Security profiles. BIG-IP_v11.4.0
reset_statistics Resets the statistics for the specified DNS Security profiles. BIG-IP_v11.4.0
set_description Sets the description for the specified DNS Security profiles. This is an arbitrary field which can be used for any purpose. BIG-IP_v11.4.0
set_query_type_inclusion_state Sets the DNS Security query type inclusion state for the specified profiles. If enabled, query types listed in the query type filter are not dropped (inclusion state). If disabled, query types listed in the query type filter are dropped (exclusion state). BIG-IP_v11.4.0

Structures

Structure

Description

DNSSecurityStatisticEntry

A struct that describes statistics for a particular DNS Security profile.

DNSSecurityStatistics

A struct that describes DNS Security statistics and timestamp.


Enumerations

Enumeration Description

Exceptions

Exception Description

Constants

Constant Type Value Description

Aliases

Alias Type Description
DNSSecurityStatisticEntrySequence DNSSecurityStatisticEntry [] A sequence of DNS Security statistics.

See Also

iControl ::
iControl :: Security :: ProfileDNSSecurity

Warning

The links to the sample code below are remnants of the old DevCentral wiki and will result in a 404 error. For best results, please copy the link text and search the codeshare directly on DevCentral.

Sample Code


Copyright © 1996-2012, F5 Networks, Inc. All rights reserved.

The BIG-IP API Reference documentation contains community-contributed content. F5 does not monitor or control community code contributions. We make no guarantees or warranties regarding the available code, and it may contain errors, defects, bugs, inaccuracies, or security vulnerabilities. Your access to and use of any code available in the BIG-IP API reference guides is solely at your own risk.