Last Modified: Jun 06, 2024
Affected Product(s):
BIG-IP DNS
Opened: Mar 15, 2023 Severity: 3-Major
DNS requests with NSEC3 RR type Responding with no NSEC3 and no authority section from BIG-IP authoritative server.
DNSSEC Validation failure at resolver.
-- Create a Zone in BIND. -- Create DNSSEC zone on BIG-IP. -- Send dig -t nsec3 ZONENAME @BIG_IP_listener +dnssec -- Observer the lack of AUTHORITY SECTION, NSEC3 and RRSIG
None
None