5.3. Results

Now lets look at results. Tail the ltm log on the BIG-IP

tail -f /var/log/ltm | grep tmm

From a Web shell on the Ubuntu Client, start wtih some DNS queries.

First, issue a DNS query that returns no response:

dig @10.1.10.53 nope.f5.com
Copy to clipboard
../../_images/nxdomain.png

Next, set the DNSSEC OK bit in the query (DO):

dig @10.1.10.53 dnssec-deployment.org +dnssec
Copy to clipboard
../../_images/dnssec-resolver-results.png

Finally, set the DNSSEC but but observe how the response is different:

dig @10.1.10.53 www.google.com +dnssec
Copy to clipboard