Bug ID 874221: DNS response recursion desired (rd) flag does not match DNS query when using iRule command DNS::header rd

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP DNS, GTM, LTM(all modules)

Known Affected Versions:
15.0.0, 15.0.1, 15.0.1.1, 15.0.1.2, 15.0.1.3, 15.0.1.4, 15.1.0, 15.1.0.1, 15.1.0.2, 15.1.0.3, 15.1.0.4, 15.1.0.5, 15.1.1, 15.1.2, 15.1.2.1, 15.1.3, 15.1.3.1, 15.1.4, 15.1.4.1, 15.1.5

Fixed In:
16.1.0, 15.1.5.1

Opened: Jan 29, 2020

Severity: 3-Major

Symptoms

DNS response recursion desired (rd) flag does not match the DNS query when using the iRule command DNS::header rd.

Impact

DNS response rd flag does not match the DNS query. This is not RFC compliant.

Conditions

-- iRule command DNS::header rd is used to set DNS query rd bit to a different value. -- At least one wide IP is configured.

Workaround

Do not configure any wide IPs.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips