eG Monitoring
 

Measures reported by GtmDnsQryStatTest

Using this test, administrators can monitor the DNS queries of different types that are received by the target BIG-IP GTM. Using this test, administrators can figure out which type of DNS queries is received in large volumes by the target BIG-IP GTM - is it the DS queries? or DNSKEY queries? or NSEC3Param queries? or AXFR queries? or IXFR queries?

Outputs of the test: One set of results for the BIG-IP GTM that is being monitored.

The measures made by this test are as follows:

Measurement Description Measurement Unit Interpretation
Total_DNSKey_query Indicates the number of DNS queries of DNSKEY type received by the target BIG-IP GTM during the last measurement period. Number

DNSKEY queries are typically done by resolvers (DNS clients) to validate the DNS answers received from name servers. BIG-IP GTM can be used to provide DNSSEC validation for the DNS answers sent to the clients.
Total_NSEC3Param_query Indicates the number of queries of NSEC3PARAM type received by the target BIG-IP GTM during the last measurement period. Number

An NSEC3PARAM query is a type of DNS query used to retrieve information about the NSEC3 (Next Secure Version 3) algorithm used in a domain's DNSSEC configuration. The NSEC3 algorithm is used to provide authenticated denial of existence for DNS records, which means that it can be used to prove that a specific record does not exist in a zone without revealing the names of other records in the zone.
Total_DS_query Indicates the number of queries of DS type received by the target BIG-IP GTM during the last measurement period. Number

A DS (Delegation Signer) query is a type of DNS query used to retrieve the public key information for a child domain. The DS query is used in DNSSEC (DNS Security Extensions) to authenticate the delegation of a domain from a parent domain to a child domain.
Total_AXFR_query Indicates the number of AXFR queries received by the target BIG-IP GTM during the last measurement period. Number

An AXFR (zone transfer) query is a type of DNS query used to retrieve a complete copy of a domain's DNS zone from a DNS server. The AXFR query is typically used by secondary DNS servers to synchronize their copy of the zone with the primary DNS server.
Total_IXFR_query Indicates the number of IXFR queries received by the target BIG-IP GTM during the last measurement period. Number

An IXFR (Incremental Zone Transfer) query is a type of DNS query used to retrieve only the changes made to a domain's DNS zone from a DNS server, as opposed to a complete copy of the zone like an AXFR query. IXFR is more efficient than AXFR when it comes to zone transfer, as it only transfers the changes made to the zone instead of the entire zone.