DNS
- Sri Raghu
After you have successfully deployed Universal DDI on a NIOS-X Server, you can start configuring global DNS properties and DNS configuration profiles to enable the DNS service on the NIOS-X Server. TheDNS server resolves NIOS-X Server names to IP addresses and supports 500 queries per second.Â
In addition, Universal DDI supports the following:
- Primary authoritative DNS
- Secondary authoritative DNS
- DNS server groups
- Access Control List (ACL) templates
- Recursion
- Forwarding
With the BloxOne Threat Defense license, you can also configure DNS forwarding proxy on the same NIOS-X Server that is running Universal DDI DNS. For more information, see Configuring DNS Forwarding Proxy and BloxOne DDI DNS.
Use the following checklist to configure DNS on Universal DDI:
Decide if you want to configure Global DNS Properties
Decide if you want to configure DNS Configuration Profiles
Decide which type of DNS Zone you want to configure
Add NIOS-X Servers
- Add Resource Records
You can configure multiple NIOS-X Servers in the application. Note that the deployment and service management are common functions. For more information, refer to the Installation Guide for BloxOne B1-105 Appliance.
DNS service performance: The table displays a DNS server's performance in terms of service restart and expected DNS server update interval times depending on how many zones and records it has configured, to start responding to changes made by a user.
| Authoritative Zones | DNS Records | Service Reload Time (seconds) | Expected DNS Server Update Interval (minutes) |
|---|---|---|---|
| 5,000 | 25,000 | 17-22 | 1.6 |
| 6,000 | 30,000 | 17-22 | 2.2 |
| 7,000 | 35,000 | 17-22 | 2.2 |
| 8,000 | 40,000 | 33-39 | 2.2 |
| 10,000 | 50,000 | 44-50 | 2.2 |
| 11,000 | 55,000 | 44-50 | 6.6 |
Expected DNS Server Update Interval refers to the time it takes for a DNS configuration to be sent from the Infoblox Portal to the NIOS-X Server running in your environment.
The DNS page on the Infoblox Portal displays the following tabs: