...
Features | Supported / Not Supported |
---|---|
Tiered licensing | Licensing is based on the Flex Grid Activation license on the Grid. Note that the queries per second are limited by the number of CPUs for IB-FLEX. |
RPZ | Yes, the maximum cache lifetime for DNS cache acceleration is set to 300 seconds if RPZ zones are configured for the member. |
Caching (A, AAAA, MX, CNAME, PTR) | Yes |
Do not cache: EDNS, TCP, Any, TSIG | Yes |
Caching over additional interfaces (v4, v6) | Yes |
Dump Acceleration Cache (CLI, GUI, PAPI) | Yes |
Clear Acceleration Cache (CLI, GUI, PAPI) | Yes |
Cache pre-fetch and cache refresh | Yes |
ACLs (Allow-queries/Responses, Match-Clients/Destination, Blackhole) | Yes |
AAAA Filtering (Bypassed but support configuring) | Yes |
Fixed RRSET ordering | Yes |
DNS64 | No |
DNS monitoring feature (netmon) | Yes, but unlike IB-4030 this feature captures DNS cached queries on the virtual DNS cache acceleration platform. |
DNS Query logging (BIND only) | Yes |
DNS Views | Yes, supports up to six DNS views. |
Forward/Stub zones | Yes |
Unbound as DNS resolver | Yes, unbound is supported through the Flex Grid Activation license. |
DNS cache acceleration related restrictions for configuration. | Yes, for NIOS version 8.2.0 restrictions are enforced based on whether the DNS cache acceleration feature is enabled or disabled. |
Reporting | Yes, please see Reports for IB-FLEX. |
VLAN | No, Infoblox does not support VLAN for virtual appliances. |
DSCP | No, Infoblox does not support DSCP for virtual appliances. |
Sort list | No |
Anycast (OSPF and BGP) | Yes |
BFD (Bidirectional Forwarding Detection) | Yes |
HA Support | Valid only for non-SRIOV. |
NIC Bonding | No |
Multiple-Interfaces on same subnet | No |
IP Rate-limit and Response logging | No |
EDNS Client Subnet support | No |
NXDOMAIN redirection | Yes |
DNSSEC (Bypassed but support configuring) | Yes |
Debug enhancements | Yes |
SNMP Support for DCA service related traps | Yes |
SNMP stats support for DNS QPS and CHR | Yes |
NX Mitigation | No |
NetFilter (Tracking tables) | No |
Traffic-capture (All modes) | Yes, partial support. Note that tcpdump captures both queries and responses. |
No flush-mode support for DNS cache acceleration cache | Yes |
Per-interface UDP DNS cache acceleration response counters | Yes |
CLI commands | You can use the commands |
DNS Query rewrite (Bypassed but supports configuring) | No |
Threat Protection | Supported on IB-FLEX platforms, but you cannot enable Software ADP and |
...
When you enable the DNS cache acceleration feature on IB-FLEX, ensure that it has enough CPU and memory to start the service, and it does not contain any authoritative zones. Note that you cannot start the service, if the total CPU is less than 8 cores or memory is less than 12G. To start the service, the number of resources mentioned in Table 8.8 are mandatory.
Anchor |
---|
...
|
...
|
Infoblox supports a selected set of reports on IB-FLEX. To view all available reports, from the Reporting tab, select the Dashboards tab. Table 9 lists all the supported reports for IB-FLEX. For information about how to create and manage user-defined reports, see Infoblox Reporting and Analytics.
...