Alteon Application Switch Operating System Application Guide
Global Server Load Balancing
Document ID: RDWR-ALOS-V2900_AG1302 743
11. Site C serves the HTTP request.
Note: When the closest site is down, Client X is redirected to the next best site. In the above
example, if Site A determines that Site C is down, it sends an HTTP redirect message with the
Site B VIP address/domain name.
Configuring GSLB with DNSSEC
Configuring GSLB with DNSSEC is an extension of the standard configuration procedure for GSLB.
Alteon provides the zones in which you can configure DNSSEC.
Note: Ensure that the time and date are configured correctly in the GSLB configuration for all
Alteons. Radware recommends that you manually configure the time date using NTP.
This section includes the following topics:
• Basic DNSSEC Configuration, page 743
• DNSSEC Key Rollover, page 746
• Importing and Exporting Keys, page 749
• Deleting Keys, page 752
• NSEC and NSEC3 Records, page 752
Basic DNSSEC Configuration
For DNSSEC to work with GSLB, you must perform the following:
1. Enable DNSSEC.
2. Create a Key Signing Key (KSK) and a Zone Signing Key (ZSK).
3. Associate the ZSK and KSK with a DNS zone.
4. Export the KSK Delegation Signer (DS) to the parent of the zone.
For example, if you have a domain called mywebhosting.radware.com, the parent of the domain
resides in radware.com.
To configure DNSSEC to work with GSLB
1. Access the GSLB menu and turn DNSSEC on.
>> Main# /cfg/slb/gslb/dnssec/on
To Next Page
Loading...
