Last Modified: Jul 28, 2026
Affected Product(s):
BIG_IP_NEXT(BNK) BNK
Known Affected Versions:
2.0.0, 2.0.0-GA, 2.0.1, 2.0.2, 2.0.3
Fixed In:
2.2.0
Opened: Dec 17, 2025 Severity: 2-Critical
Most DDoS Vectors are supported on both Global level & Per Context level. DNS Nxdomain DoS detection & mitigation feature is supported only on Global Context. However the Per Context DDoS CRD wrongly includes sub-section "dnsNxdomainQuery" defined, which is not supported.
Including dnsNxdomainQuery vector in Per Context DDoS CRD, is misleading.
Per context DDoS CRD wrongly included sub-section "dnsNxdomainQuery". However this configuration section is not applicable.
Use Global DDoS dnsNxdomainQuery vector. Per Context level DoS mitigation is not supported for DNS Nxdomain Vector.
None