Bug ID 1044425: NSEC3 record improvements for NXDOMAIN

Last Modified: Feb 07, 2024

Affected Product(s):
BIG-IP DNS(all modules)

Known Affected Versions:
15.1.2.1, 15.1.3, 15.1.3.1, 15.1.4, 15.1.4.1, 15.1.5

Fixed In:
17.0.0, 16.1.2.2, 15.1.5.1, 14.1.4.6, 13.1.5

Opened: Sep 02, 2021

Severity: 3-Major

Related Article: K85021277

Symptoms

BIG-IP DNSSEC NSEC3 records for NXDOMAIN responses can be improved to support current best practices.

Impact

BIG-IP DNSSEC NSEC3 records for NXDOMAIN responses do not follow current best practices.

Conditions

- DNSSEC zone configured

Workaround

N/A

Fix Information

BIG-IP DNSSEC NSEC3 records for NXDOMAIN responses now follow current best practices.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips