Bug ID 1313369: Significant performance drop observed for DNS cache validating resolver for responses with indeterminate and insecure validation status

Last Modified: Jul 24, 2024

Affected Product(s):
BIG-IP TMOS(all modules)

Fixed In:
17.1.1, 16.1.5

Opened: Jun 27, 2023

Severity: 3-Major

Symptoms

Performance drop observed when changing DNS cache resolver to validating resolver for responses with indeterminate and insecure validation status. To know more about the validation status, check RFC 4035 (section 4.3).

Impact

Performance of validating resolver will be less than expected.

Conditions

- Create a DNS cache validating resolver. - Ensure the responses are with Indeterminate and Insecure validation status. - Observe the performance as compared to responses with secured validation status.

Workaround

None

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips