Try SpotterManage DNS resolvers on a BIG-IP
| "added in version" 1.0.0 of f5networks.f5_modules"
Authors: Tim Rupp (@caphrim007)
Install with ansible-galaxy collection install f5networks.f5_modules:==1.28.0
collections:
- name: f5networks.f5_modules
version: 1.28.0Manage DNS resolvers on a BIG-IP system.
- name: Create a simple DNS responder for OCSP stapling
bigip_dns_resolver:
name: resolver1
provider:
password: secret
server: lb.mydomain.com
user: admin
delegate_to: localhost
name:
description:
- Specifies the name of the DNS resolver.
required: true
type: str
state:
choices:
- present
- absent
default: present
description:
- When C(present), ensures the resource exists.
- When C(absent), ensures the resource is removed.
type: str
use_tcp:
description:
- Specifies whether the system answers and issues TCP-formatted queries.
- When creating a new resolver, if this parameter is not specified, the default is
C(true).
type: bool
use_udp:
description:
- Specifies whether the system answers and issues UDP-formatted queries.
- When creating a new resolver, if this parameter is not specified, the default is
C(true).
type: bool
provider:
description:
- A dict object containing connection details.
suboptions:
auth_provider:
description:
- Configures the auth provider for to obtain authentication tokens from the remote
device.
- This option is really used when working with BIG-IQ devices.
type: str
no_f5_teem:
default: false
description:
- If C(yes), TEEM telemetry data is not sent to F5.
- You may omit this option by setting the environment variable C(F5_TELEMETRY_OFF).
- Previously used variable C(F5_TEEM) is deprecated as its name was confusing.
type: bool
password:
aliases:
- pass
- pwd
description:
- The password for the user account used to connect to the BIG-IP or the BIG-IQ.
- You may omit this option by setting the environment variable C(F5_PASSWORD).
required: true
type: str
server:
description:
- The BIG-IP host or the BIG-IQ host.
- You may omit this option by setting the environment variable C(F5_SERVER).
required: true
type: str
server_port:
default: 443
description:
- The BIG-IP server port.
- You may omit this option by setting the environment variable C(F5_SERVER_PORT).
type: int
timeout:
description:
- Specifies the timeout in seconds for communicating with the network device for
either connecting or sending commands. If the timeout is exceeded before the
operation is completed, the module will error.
type: int
transport:
choices:
- rest
default: rest
description:
- Configures the transport connection to use when connecting to the remote device.
type: str
user:
description:
- The username to connect to the BIG-IP or the BIG-IQ. This user must have administrative
privileges on the device.
- You may omit this option by setting the environment variable C(F5_USER).
required: true
type: str
validate_certs:
default: true
description:
- If C(no), SSL certificates are not validated. Use this only on personally controlled
sites using self-signed certificates.
- You may omit this option by setting the environment variable C(F5_VALIDATE_CERTS).
type: bool
type: dict
version_added: 1.0.0
version_added_collection: f5networks.f5_modules
use_ipv4:
description:
- Specifies whether the system can use IPv4 to query backend nameservers.
- An IPv4 Self IP and default route must be available for these queries to work successfully.
- When creating a new resolver, if this parameter is not specified, the default is
C(true).
type: bool
use_ipv6:
description:
- Specifies whether the system can use IPv6 to query backend nameservers.
- An IPv6 Self IP and default route must be available for these queries to work successfully.
- When creating a new resolver, if this parameter is not specified, the default is
C(true).
type: bool
partition:
default: Common
description:
- Device partition to manage resources on.
type: str
cache_size:
description:
- Specifies the size of the internal DNS resolver cache.
- When creating a new resolver, if this parameter is not specified, the default is
5767168 bytes.
- After the cache reaches this size, when new or refreshed content arrives, the system
removes expired and older content and caches the new or updated content.
type: int
route_domain:
description:
- Specifies the route domain the resolver uses for outbound traffic.
type: int
answer_default_zones:
description:
- Specifies whether the system answers DNS queries for the default zones localhost,
reverse 127.0.0.1 and ::1, and AS112.
- When creating a new resolver, if this parameter is not specified, the default is
C(false), meaning the system passes along the DNS queries for the default zones.
type: bool
randomize_query_case:
description:
- When C(true), specifies the internal DNS resolver randomizes character case in domain
name queries issued to the root DNS servers.
- When creating a new resolver, if this parameter is not specified, the default is
C(true).
type: bool
answer_default_zones: description: The new Answer Default Zones setting. returned: changed sample: true type: bool cache_size: description: The new cache size of the resource. returned: changed sample: 50000 type: int randomize_query_case: description: The new Randomize Query Character Case setting. returned: changed sample: false type: bool route_domain: description: The new route domain of the resource. returned: changed sample: /Common/0 type: str use_ipv4: description: The new Use IPv4 setting. returned: changed sample: true type: bool use_ipv6: description: The new Use IPv6 setting. returned: changed sample: default type: bool use_tcp: description: The new Use TCP setting. returned: changed sample: false type: bool use_udp: description: The new Use UDP setting. returned: changed sample: true type: bool