To configure DNS queries and responses, complete the following:
- Grid: From the Data Management tab, select the DNS tab, expand the Toolbar and click Grid DNS Properties.
- Member: From the Data Management tab, select the DNS tab and click the Members tab -> member checkbox -> Edit icon.
- In the Grid DNS Properties or Member DNS Properties editor, click Toggle Advanced Mode and select the Logging tab.
- Under Data Connection for all DNS Queries/Responses to a Domain, complete the following:
- Select the Capture DNS Queries checkbox to start capturing DNS queries. This enables the feature set for configuration. When you enable this option at the member level, the appliance captures DNS queries for the selected members only.
Select the Capture DNS Responses checkbox to start capturing DNS responses. This enables the feature set for configuration. When you enable this option at the member level, the appliance captures DNS responses for the selected members only.
Note
Enabling the logging of queries and responses at the same time can increase disk space usage and adversely affect DNS services and performance. Infoblox recommends that you do not configure both logging at the same time.
- Select Capture queries/responses for all domains to capture queries and responses to all domains and zones.
- Select Limit capture to these domains to capture DNS queries and responses to domains and zones one at a time.
- Specify domains for DNS capture operations in the Domain table by clicking the Add icon, and choosing Add Domain or Bulk Add Domains from the menu.
- Retain captured queries on the local disk: Select this checkbox to save the DNS queries on the appliance. In addition to the local disk, you can select to export the DNS queries to the Data Connector by selecting SCP in the Export to drop-down list.
Export to: From the drop-down list, select SCP to back up the DNS queries on the Data Connector and None to save queries only on the appliance. To save the captured DNS queries on both the appliance and the Data Connector, select the Retain captured queries on the local disk checkbox and SCP from the Export to drop-down list.
To define the destination for capture files, perform the following:Note
When you configure an SCP server and enable the MGMT port, the NIOS appliance uses SSH for data transfer. It uses the same authentication and provides the same security as SSH. SCP uses the LAN1 port to communicate with the external servers.
- When you select SCP from the Export to drop-down list, complete the following:
- In the Directory Path field, enter the directory to which the capture file will be saved on the server.The ~ symbol should/must be used as a directory for the Data Connector VM.
- In the Server Address field, enter the IP address of the Data Connector VM to which the capture files will be saved.
- Enter the file server account Username and Password values. The username and password are the same as used when configuring for the NIOS source on the Cloud Services Portal.
- Limit query data collected per file to minutes or 100MB (whichever comes first): This option limits the collection of query data per capture file. A capture file for logging DNS queries and responses is rolled over based on the configured time limit or when the file reaches 100 MB in size, whichever is sooner. The default time limit is 10 minutes. You can enter a value from 1 to 10.
5. Save the configuration.