About the F5 DNS Cloud Service¶
The F5 DNS Cloud Service offers either a primary DNS service or a secondary DNS service to serve as a backup to your primary DNS services. DNS Cloud Service provides a number of benefits including global distribution, built-in DDoS Protection, and automatic scaling.
In the DNS protocol, there are primary authoritative DNS servers and secondary authoritative DNS servers. The primary DNS servers always hold the true configuration, and you make configuration changes only on the primary DNS servers. The secondary DNS servers then transfer the configurations from the primary servers. In the event that the primary DNS fails, a secondary DNS server continues providing DNS responses.
When creating a secondary DNS service, you must continue to use your current primary DNS servers and configure the DNS Cloud Service as a secondary DNS server. All configuration changes you make on the primary DNS server are replicated to the DNS Cloud Service through RFC-compliant zone transfers.
DNS Cloud Service as a secondary DNS service can process all of your DNS traffic if you configure your registrar or NS records to only point to the DNS Cloud Service, thus making your primary DNS server a “hidden primary” DNS server. F5 recommends this choice because you can hide your primary DNS and send all traffic to the DNS Cloud Service, which reduces the vulnerability of the primary DNS server to an attack, and improves DNS response times by leveraging our globally distributed DNS infrastructure and Anycast network.
You can specify which zones are transferred to the DNS Cloud Service acting as a secondary DNS. The DNS service uses Zone Transfer (AXFR) to retrieve DNS resource records from your primary DNS server. You can configure as many zones as needed. For each applicable zone, you must specify an existing TSIG key.
After you configure your DNS server to use the DNS Cloud Service as a secondary DNS server, there will be no impact to your applications if the primary DNS server becomes unavailable.
The DNS Cloud Service will continue to provide DNS responses. However, new configuration changes will only be possible when the primary DNS server is operational again.
Getting Started with DNS Cloud Service¶
Create and deploy a secondary DNS zone¶
Creating and deploying a secondary DNS zone with DNS Cloud Services is both fast and easy. You can watch the video below to see how it is done, or you can follow the six steps below to setup the a service for your zone.
Visit this knowledge center article for all the details: Create and deploy a secondary DNS zone.
Create and deploy a primary DNS zone¶
DNS Cloud Service needs just some basic information and a few easy steps to create a deploy a primary DNS zone.
Once the service is setup, you simply update your DNS records to record DNS Cloud Services as your primary DNS service.
Visit this knowledge center article for all the details: Create and deploy a primary DNS zone.