After you have successfully deployed BloxOne DDI on a host, you can start configuring global DNS properties and DNS configuration profiles to enable the DNS service on the host. The BloxOne DNS server resolves host names to IP addresses and supports 500 queries per second.
In addition, BloxOne DDI supports the following:
- Primary authoritative DNS
- Secondary authoritative DNS
- DNS server groups
- Access Control List (ACL) templates
- Recursion
- Forwarding
With the BloxOne Threat Defense license, you can also configure DNS forwarding proxy on the same host that is running BloxOne DDI DNS. For more information, see Configuring DNS Forwarding Proxy and BloxOne DDI DNS.
Use the following checklist to configure DNS on BloxOne DDI:
Decide if you want to configure Global DNS Properties
Decide if you want to configure DNS Configuration Profiles
Decide which type of DNS Zone you want to configure
Add Hosts
- Add Resource Records
You can configure multiple hosts in the application. Note that the deployment and service management are common functions. For more information, refer to the Installation Guide for BloxOne B1-105 Appliance.
DNS service performance: The table displays a DNS server's performance in terms of service restart and expected DNS server update interval times depending on how many zones and records it has configured, to start responding to changes made by a user.
| Authoritative Zones | DNS Records | Service Reload Time (seconds) | Expected DNS Server Update Interval (minutes) |
|---|---|---|---|
| 5,000 | 25,000 | 17-22 | 1.6 |
| 6,000 | 30,000 | 17-22 | 2.2 |
| 7,000 | 35,000 | 17-22 | 2.2 |
| 8,000 | 40,000 | 33-39 | 2.2 |
| 10,000 | 50,000 | 44-50 | 2.2 |
| 11,000 | 55,000 | 44-50 | 6.6 |
Expected DNS Server Update Interval refers to the time it takes for a DNS configuration to be sent from the Cloud Services Portal to the BloxOne host running in your environment.
The DNS page on the Cloud Services Portal displays the following tabs: