Table Of Contents

A - B - C - D - E - F - G - H - I - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Z

Index

A

answer

activating 1-57

associating with a proximity-based location 9-23

configuring 6-1

CRA-type answer, creating 6-20

CRA-type answer, overview 1-23

deleting 6-28

hit count 10-94

keepalive 1-24

keepalive statistics 10-94

modifying all in location 6-27

modifying an answer 6-24

monitoring 10-95

name server-type answer, creating 6-22

name server-type answer, overview 1-22

overview 1-20, 6-1

reactivating 6-27

setting all to ICMP 1-58

setting all to none 1-58

statistics, monitoring 10-5

status 10-97

suspending 1-57, 6-26

suspending all answers in a location 6-27

VIP-type answer, creating 6-3

VIP-type answer, multi-port 1-32, 6-8

VIP-type answer, overview 1-22

answer group

adding answers 6-32

balance method options 1-36

balance methods 6-29

CRA configuration information 7-34

creating 6-30

current members 6-33

deleting 6-45

DNS rule 1-17, 1-21, 6-2

DNS Rule Wizard 7-16

error messages A-4

general configuration 6-31

load threshold 6-34

modifying 6-35

order 6-34

overview 1-21, 6-29

removing answers 6-35

statistics, monitoring 10-8

suspending 6-40

suspending or reactivating all for an owner 6-42

VIP DNS configuration information 7-32, 7-34

weight 6-34

answer hit counts 10-93

answer keepalive statistics 10-94

Anywhere source address 1-19, 3-1

appliance-based global server load balancing 1-10

A record 7-27, 7-30

attacks command 10-21

B

balance clause 6-29, 7-31, 8-25, 9-38

balance method

answer group options 1-36

answer group pair 6-29

balance clauses 6-29

boomerang 1-35

DNS rule 1-17, 1-21, 6-2

DNS Rule Wizard 7-23

hash 1-35, 7-24, 7-31

hashed balance method 7-31

least loaded 1-34, 7-31

load threshold option 7-20

ordered list 1-33, 7-24, 7-31

order option 1-37, 7-20

overview 1-33

proximity 9-34

round robin 1-34, 7-24, 7-31

sticky 8-21

weighted round robin 1-34, 7-24, 7-31, 7-32

weight option 1-37, 7-20

BIND sample zone configuration file 7-48

boomerang

activity, monitoring 10-3

balance method 1-35

clear statistics 10-90

DNS race 1-35

server 1-36

server, monitoring status 10-3

server status 10-3

browsers supported 1-48

C

Cancel icon 1-56

CIDR block masking 3-1

Cisco IOS-based router

DRP agent, configuring 9-14

IOS release 12.1 interoperability considerations 9-15

selecting as DRP agent 9-14

supported releases 9-14

clauses (balance clause) in answer group 6-29

CLI device management 1-47

closeness (DNS race) 6-20

CNR

See Cisco Network Registrar

communication between nodes 1-46

Content Services Switch

data center deployment 1-46

definition G-2

global load-balancing 1-2

GSS network deployment 1-10

VIP answers 1-22

Content Switching Module

data center deployment 1-47

definition G-2

global load-balancing 1-2

GSS network deployment 1-10

VIP answers 1-22

CRA

answer, creating 6-20

balance method 1-37, 6-29

clear statistics 10-91

closeness 6-20

CRA answer overview 1-23

definition G-2

DNS race 6-20

global keepalive configuration 5-19

keepalive 1-29

last gasp address 7-25

minimum frequency 5-19

one way delay 6-22

overview 1-29

proximity DNS race 6-20

round-trip time 6-22

showing statistics 10-32

timing delay 5-19

Create icon 1-54

CSM

See Content Switching Module

CSS

See Content Services Switch

D

data center

definition G-3

deployment 1-46

DDoS

attacks statistics, clearing 10-90

attack statistics, displaying 10-21

clear statistics 10-90

detection and mitigation

affected network areas 1-40

anti-spoofing 1-43

configuration 1-40

filter checking 1-41

overview 1-40

rate-limiting 1-43

types of attacks prevented 1-41

failed DNS queries, displaying 10-24

global statistics, clearing 10-90

global statistics, displaying 10-28

rate-limits, displaying 10-25

running configuration, displaying 10-26, 10-31

spoofed/non-spoofed D-proxies, displaying 10-23

statistics, monitoring 10-104

show 10-21, 10-23, 10-24, 10-25, 10-28, 10-31

delegation

definition 1-3

domains to GSS 1-45, 7-48

GSS devices 7-47

subdomains to GSS 1-45, 7-48

Delete icon 1-56

deployment

configuring name servers 7-47

data center 1-47

locations and regions 2-2

overview 1-44

resources 2-2

typical GSS deployment 1-44

details pages 1-52

DNS

all 7-27, 7-30

A record 7-27, 7-30

balance clause 7-31, 8-25, 9-38

clear statistics 10-90

creating DNS rules 7-6

delegation 7-47

DNS queries 7-27, 7-30

glue A records 7-48

GSS as an appliance

GSS role in hierarchy 1-9

hosted domain 1-19

iterative request 1-7

negative response queries 1-5

common response codes 1-5

query 1-19

race 1-23, 6-20

record request 7-27, 7-30

recursive request 1-7

request resolution 1-8

resource records 1-4

routing overview 1-3

sample BIND zone configuration 7-48

server, modifying 7-48

server, monitoring 10-4

SOA records 1-4

configuring for negative responses 1-6

fields 1-5

format 1-4

TTL 1-5

TTL fields 1-5, 1-9

traditional routing 1-3

unmatched queries 10-102

zone configuration file 7-48

DNS race

balance method 1-35

closeness 6-20

coordinate start time 6-20

CRAs 1-23

DNS rule

activating 1-57

answer 1-17, G-2

balance clause 6-29

components 1-17

creating 7-2

definition G-3

deleting 7-43

error messages A-6

filtering 1-55

filters, configuring 7-43

filters, removing 7-47

hit count 10-98

modifying 7-36, 7-37

overview 1-16

proximity, enabling/disabling 9-38

reactivating 7-40

reactivating all by owner 7-41

removing filters 7-47

showing all rules 1-55

statistics, monitoring 10-14

sticky, disabling 8-24

sticky, enabling by domain 8-25

sticky, enabling by domain list 8-25

sticky, enabling for balance clause 8-25

sticky inactivity timeout 8-25

sticky overview 8-21

suspending 1-58, 7-38

suspending all by owner 7-41

DNS Rule Builder

balance clause 7-31, 8-25, 9-38

CRA configuration information 7-34

creating DNS rules 7-28

DNS queries 7-30

modifying DNS rule 7-36

name server balance methods 7-24, 7-31

overview 7-4

proximity, enabling 9-35, 9-38

sticky, enabling 8-22

VIP answer group configuration information 7-32, 7-34

VIP balance methods 7-31

DNS rule filter

configuring 7-43

parameters 7-45

removing 7-47

DNS Rules tab 1-50

DNS Rule Wizard

activating 7-27

answer group, configuring 7-16

balance method, configuring 7-23

creating DNS rules 7-6

domain list, configuring 7-12

icons 1-55, 1-56, 1-57

modifying DNS rule 7-37

overview 7-2

source address list, configuring 7-9

summary 7-25

suspending 7-27

DNS sticky

See sticky

documentation

audience xvii

caution and note overview xxii

conventions xix, xx

organization xviii

related xix

set xix

symbols and conventions xx

domain lists

adding domains to 4-4, 7-14

creating 4-2

current members 4-5

deleting 4-8

DNS Rule Wizard 7-12

error messages A-15

general configuration 4-3

maximum domains 1-20

maximum nonwildcard domain length 4-5, 7-14

modifying 4-6

overview 1-20, 4-1

regular expressions 4-1, 4-5, 7-14

removing domains 4-7

statistics, monitoring 10-11

sticky by domain list 8-25

wildcards in domains 4-5, 7-14

domain name space 1-3

Domain Name System

See DNS

domains

delegating to GSS 1-45, 7-48

hit counts 10-100

maximum length 4-5, 7-14

maximum name length 4-4, 7-14

maximum per domain list 1-20, 4-1

statistics, monitoring 10-10

sticky by domain 8-25

wildcards maximum length 4-5, 7-14

D-proxy

background 1-7

definition G-4

iterative requests 1-7

name server forwarding 1-22

query GSS 1-19

dproxy command 10-23

DRP

authentication, enabling (Cisco IOS router) 9-15

authentication, enabling (GSS) 9-31

key chain (Cisco IOS router) 9-15

key identification number (GSS) 9-33

keys, creating (Cisco IOS router) 9-15

keys, creating (GSS) 9-31

keys, deleting (GSS) 9-33

key string number (GSS) 9-33

overview 9-3

DRP agent

clear statistics 10-90

configuring Cisco IOS-based router 9-14

displaying status 10-20

enabling 9-15

IOS release 12.1 interoperability considerations 9-15

overview 9-3

RTT measurement 9-3

selecting Cisco IOS-based router 9-14

supported Cisco IOS releases 9-14

drpagent

activity, displaying 10-20

server status 10-20

E

error messages

answer group A-4

DNS rule A-6

domain list A-15

GSSM A-24

location A-18

owner A-19

proximity A-19

region A-19

shared keepalive A-15

source address list A-24

sticky A-26

user A-27

user view A-28

user views A-28

exporting icon 1-55

Export to CSV icon 1-55

F

failed-dns command 10-24

failure detection time, adjusting 1-29

filters

DNS rules 7-43

parameters 7-45

removing 7-47

firewall

deploying GSS devices 1-45

permitting traffic to GSS 1-45

fully qualified domain name G-4, G-5

G

global keepalives

CRA configuration settings 5-19

fast transmission rate 1-29, 5-4, 5-7, 5-10, 5-13, 5-16

HTTP HEAD configuration settings 5-10

ICMP configuration settings 5-4

KAL-AP configuration settings 5-13

modifying 5-2

name server configuration settings 5-20

overview 5-2

properties, modifying 5-2

Scripted keepalive configuration settings 5-15

standard transmission rate 1-29, 5-4, 5-7, 5-10, 5-13, 5-16

TCP configuration settings 5-7

global manual reactivation 2-17

global server load balancing

balance clauses 6-29

configuration order 1-61

data centers 1-47

definition G-4

delegation of GSS devices 7-47

global statistics 10-101

monitoring 10-92

overview 1-11

summary 1-60

traffic management overview 1-38

using the GSS 1-10

Global Site Selector

acting as GSSM 1-15, 1-44

authoritative DNS server 1-11

balancing data centers 1-47

boomerang server 10-3

CLI-based management 1-47

communication 1-46

delegation of devices 7-47

deployment 1-44, 1-45, 1-46, 7-47

DNS server, monitoring 10-4

factors in responding to a request 1-11

general statistics, monitoring 10-12

global server load balancing 1-10

GSLB configuration 1-60

GUI-based management 1-48

hardware 1-15

interact with SLBs 1-11

inter-GSS communications 1-46

keepalives overview 1-24, 5-1

locating 1-44

network management 1-47

overview 1-2, 1-15

packet filtering 1-45

resources, grouping 2-16

software architecture 1-14

synchronized with GSSM 1-15, 1-46

Global Site Selector Manager

communication 1-46

database 1-15, 1-46

definition G-4

deployment 1-44

DNS rule configuration interface 7-2

DNS rules 1-16

error messages A-24

GSLB configuration 1-60

GUI overview 1-49

icons 1-54

inter-GSS communication 1-46

keepalives overview 5-1

locating 1-44

online help 1-59

overview 1-15

primary 1-15

primary GSSM GUI overview 1-48

redundancy 1-46

resources, grouping 2-16

standby 1-15

standby, as backup 1-44

standby acting as primary 1-46

global statistics 10-109

global sticky

authentication 8-7, 8-20

by domian, enabling 8-25

by domian list, enabling 8-25

clearing sticky mesh statistics 10-91

enabling from GUI 8-17

encryption 8-6, 8-19

favored peer 8-9, 8-20

joining the mesh 8-8

mesh, communicating 8-8

mesh configuration 8-18

mesh conflict resolution 8-7

mesh statistics 10-65, 10-80

mesh updates 8-5, 8-6

messaging statistics 10-60, 10-73, 10-76

overview 8-5

peer mesh 8-5

synchronizing GSS system clock with peers 8-14

glossary of terms G-1

glue A records 7-48

GSLB

See global server load balancing

GSS

See Global Site Selector

GSSM

See Global Site Selector Manager

GSS network

configuration 1-15, 1-46

definition G-5

deployment 1-44

global statistics 10-101, 10-109

GSLB status 10-92

management 1-47

monitoring through CLI 10-2

monitoring through GUI 10-92

organizing 2-2

primary GSSM 1-15

resource grouping 2-16

GSS role in DNS hierarchy 1-9

GUI

browsers supported 1-48

details pages 1-52

device management 1-47

error messages A-1

icons 1-54

list pages 1-51

logging on 1-49

monitoring GSS device status 10-47

navigation 1-53

organization 1-50

overview 1-48

refreshing 1-55

tabs 1-50

understanding 1-48

GUI error messages A-1

H

hashed balance method 1-35, 7-24, 7-31

help

navigation link 1-59

obtaining 1-59

primary GSSM Online help overview 1-59

hosted domain

definition G-5

domain names 1-20

name examples 1-20

overview 1-19, 4-1

regular expressions 1-20

requested 1-17

statistics 10-100

HTTP HEAD keepalive

default path 5-11, 5-29, 6-16

destination port 5-11, 6-15

global keepalive configuration 5-10

host tag 5-29, 6-16

overview 1-27

shared keepalive configuration 5-28

statistics 10-37

termination method 5-11, 5-29, 6-16

VIP answer 6-15

I

ICMP keepalive

global keepalive configuration 5-4

overview 1-27

shared keepalive configuration 5-24, 5-32

statistics 10-39

VIP answer 6-11, 6-19

icons 1-54

inter-GSS communication 1-46

iterative requests 1-7

K

KAL

See keepalive

KAL-AP keepalive

by tag 6-17

by VIP 6-17

CAPP hash secret 5-14, 5-31

global keepalive configuration 5-13

overview 1-28

primary and secondary IP addresses 5-30

shared keepalive configuration 5-30

statistics 10-40

VIP answer 6-17

keepalive 6-3

clear statistics 10-90

cra, clear statistics 10-91

CRA overview 1-29

CRA statistics, monitoring 10-32

CRA type 1-29

definition G-6

deleting a shared keepalive 5-39

error messages A-15

failure detection time, adjusting 1-29

fast transmission rate 1-29, 5-4, 5-7, 5-10, 5-13, 5-16

global properties, modifying 5-2

global properties, overview 5-2

global statistics, monitoring 10-33

http-head, clear statistics 10-91

HTTP HEAD connection termination method 5-11, 5-29, 6-16

HTTP HEAD overview 1-27

HTTP HEAD statistics, monitoring 10-37

ICMP statistics, monitoring 10-39

ICMP type 1-27

kalap, clear statistics 10-91

KAL-AP overview 1-28

KAL-AP statistics, monitoring 10-40

keepalive attempts 1-32, 5-5, 5-9, 5-12, 5-14, 5-25, 5-27, 5-30, 5-32, 5-37, 6-12, 6-14, 6-17

multi-port 1-25

name server 1-29

name server overview 1-29

name server statistics, monitoring 10-44

none 1-29

ns, clear statistics 10-91

number of retries 1-31, 5-5, 5-8, 5-11, 5-14, 5-17, 5-27, 5-29, 5-31, 6-12, 6-14, 6-16

overview 1-24

probes 1-32, 5-5, 5-9, 5-12, 5-14, 5-25, 5-27, 5-30, 5-32, 5-37, 6-12, 6-14, 6-17

scripted-kal, clear statistics 10-91

Scripted keepalive overview 1-28

Scripted statistics, displaying 10-42

shared keepalive, creating 5-21

shared keepalive, modifying 5-37

shared keepalive overview 5-21

shared VIP keepalives, overview 5-21

standard transmission rate 1-29, 5-4, 5-7, 5-10, 5-13, 5-16

supported types 1-24

TCP connection termination method 5-8, 5-27, 6-14

TCP overview 1-27

TCP statistics, monitoring 10-45

transmission interval formula 1-30

VIP 1-27, 1-28, 5-21

L

last gasp address 7-25

least loaded 7-31

balance method 1-34, 7-24, 7-31

overview 1-34, 7-24, 7-31

weight option 1-37

list pages

overview 1-51

sorting items 1-51

load threshold, balance method option 7-20

local sticky

disabling on a GSS 8-37

enabling from GUI 8-17

enabling on a GSS 8-37

overview 8-2

location

associating with a proximity zone 9-21

creating 2-7

definition G-6, G-7

deleting 2-10

error messages A-18

modify all answers in 6-27

modifying 2-9

organizing resources 2-16

overview 1-17, 2-2

suspending all answers 6-27

M

manual reactivation

global 2-17

manual reactivation option

clauses 7-33, 7-35

CRA answers 6-21

name server answers 6-23

VIP answers 6-7

Modify icon 1-54

monitoring

answer hit counts 10-93

answer keepalive statistics 10-94

answer status 10-97

boomerang server status 10-3

DNS rule statistics 10-98

DNS server 10-4

global load-balancing status 10-92

global statistics 10-109

global sticky mesh statistics 10-65, 10-80

global sticky messaging statistics 10-60, 10-73, 10-76

GSS network status through CLI 10-2

hosted domain statistics 10-100

proximity database statistics 10-48, 10-56, 10-111

proximity DNS rule hit count statistics 10-110

proximity group configuration 10-55, 10-56

proximity group statistics 10-49, 10-50

proximity lookup statistics 10-14, 10-47, 10-51, 10-113

proximity probe statistics 10-52, 10-53, 10-114

proximity status 10-54

source address statistics 10-101

status of GSS devices from the GUI 10-47

sticky database statistics 10-58, 10-71, 10-118

sticky DNS rule hit count statistics 10-117

sticky global mesh statistics 10-120

sticky group statistics 10-67, 10-68, 10-89

sticky lookup statistics 10-19, 10-58

sticky status 10-69

Monitoring tab 1-50

N

name server

answer type, creating 6-22

authoritative 1-9

authoritative name server (ANS) 1-7

balance method 6-29

balance method options 1-37

balance methods 7-24, 7-31

clear statistics 10-91

client name server (CNS) 1-7

definition G-7

DNS resolvers (DNSR) 1-7

forwarding 1-22

intermediate name server (INS) 1-7

keepalive 1-29

name server answer overview 1-22

overview 1-7

query 6-24

records, adding to zone configuration file 7-48

root name servers (RNS) 1-7

name server keepalive

global keepalive configuration 5-20

minimum frequency 5-20

overview 1-29

query domain 5-20

statistics 10-44

navigation through the GUI 1-53

negative DNS response queries 1-5

common response codes 1-5

negative DNS responses queries SOA configuration 1-6

network

deployment 1-44

locating GSS on 1-44

network design guidelines for proximity 9-9

network management 1-47

CLI-based 1-47

GUI-based 1-48

monitoring global server load-balancing statistics 10-92

network proximity

See proximity

node communication 1-46

NTP server

enabling 8-14, 9-16

identifying 8-14, 9-16

synchronizing GSS system clock with peers 8-14, 9-16

number of retries for keepalive types 1-31, 5-5, 5-8, 5-11, 5-14, 5-17, 5-27, 5-29, 5-31, 6-12, 6-14, 6-16

O

one-way delay 6-22

Online help overview 1-59

ordered list 7-31

balance method 1-33, 7-24, 7-31

definition G-8

overview 1-33

order option, balance method 1-37, 7-20

origin server G-8

owner

creating 2-11

deleting 2-15

error messages A-19

modifying 2-14

organizing resources 2-16

overview 1-18, 2-2

reactivating all DNS rules 7-41

suspending all answer groups for 6-42

suspending all DNS rules 7-41

P

PDB

See proximity database

Print icon 1-54

proximity

Acceptable RTT value 9-30, 9-38

Acceptable Zone value 9-30, 9-39

balance clause information 9-38

clearing statistics 10-91

configuring from CLI 9-40

configuring from GUI 9-26

database statistics, monitoring 10-48, 10-56, 10-111

deleting database entries 9-48

deleting static entries 9-47

disabling 9-27

DNS Rule Builder, adding to 9-35

DNS rule hit count statistics, monitoring 10-110

DNS rule overview 9-34

DNS rule statistics, monitoring 10-14, 10-47

DRP authentication, enabling/disabling 9-31

dumping proximity database entries 9-49, B-1

enabling 9-27, 9-38

Equivalence Window 9-28

error messages A-19, A-28

group configuration, monitoring 10-55, 10-56

group statistics, monitoring 10-49, 10-50

inactivity timeout 9-6, 9-28

initial probe method 9-29

loading proximity database entries 9-52

locally disabling/enabling proximity on a GSS 9-54

lookup statistics, monitoring 10-51, 10-113

manually initiating probing 9-53

mask, specifying 9-27

network design guidelines 9-9

network proximity example 9-7

overview 9-2

periodic proximity database backup 9-51

probe management overview 9-3

probe methods 9-5

probe statistics, monitoring 10-52, 10-53, 10-114

proximity database overview 9-5

proximity group, creating 9-43

proximity group deletion 9-44

proximity group overview 9-41

quick start 9-10

results of locally disabling on a GSS 9-54

static database entries, adding 9-45

statistics, monitoring (CLI) 10-47

statistics, monitoring (GUI) 10-109

status, monitoring (CLI) 10-47

subsystem statistics, monitoring 10-54

synchronizing GSS system clock with peers 9-16

wait-state condition, enabling/disabling 9-30, 9-39

XML schema file B-1

zone overview 9-2

zones, associating with a location 9-21

zones, associating with an answer 9-23

zones, creating 9-18

zones, deleting 9-21

zones, modifying 9-20

proximity database

age-out process 9-6

automatic backup 9-49

deleting dynamic entries 9-48

deleting static entries 9-47, 9-48

dumping entries 9-49

inactivity timeout 9-6, 9-28

loading entries 9-52

maximum number of entries 9-6

overview 9-5

periodic backup 9-51

RTT, assigning to static entries 9-46

RTT values 9-5

specifying entry format to dump 9-50, B-1

static entries, adding 9-45

proximity group

benefits 9-42

creating 9-43

deleting 9-44

entering multiple groups 9-44

IP address block, deleting 9-44

overview 9-41

proximity probing agent

assigning to static database entries 9-46

initial probe method 9-29

manually initiating probing 9-53

probe agent overview 9-3

probe methods 9-5

probing process 9-4

refresh probe interval 9-28

RTT results 9-5

proximity zone

Acceptable Zone value 9-30, 9-39

associating with a location 9-21

associating with an answer 9-23

creating 9-18

deleting 9-21

determining most proximate answer 9-6

Equivalence Window 9-28

modifying 9-20

network design guidelines 9-9

overview 9-2

probe methods 9-5

RTT 9-2

Q

query

answers 6-2

balance methods 1-33

CRA answer 6-20

DNS request 1-9

DNS rules 1-16

KAL-AP 1-28, 6-17

match DNS query type 7-27

name server 1-29, 5-20

name server answer 6-22

not matched to D-proxy 1-19

query domain 5-20

source addresses 1-18

VIP answer 6-3

R

rate-limit command 10-25

reactivating

all answer groups for an owner 6-42

all answers in an answer group 6-42

all answers in location 6-27

all DNS rules by owner 7-41

answer 6-27

DNS rule 7-40

record request 7-27

redundancy synchronization 1-46

Refresh icon 1-55

refreshing the GUI 1-55

region

creating 2-3

definition G-9

deleting 2-10

error messages A-19

modifying 2-6

organizing resources 2-16

overview 1-17, 2-2

regular expressions 1-20, 4-1, 4-5, 7-14

report

answer hit counts 10-93

answer status 10-97

DNS rule hit count 10-98

domain hit count 10-100

keepalive statistics 10-94

source address hit count 10-103

requests

iterative 1-7

resolution 1-7, 1-11

resource records 1-4

resources

configuring 2-1

grouping 2-16

organizing 2-2

Resources tab 1-50

round robin 7-31

balance method 1-34, 7-24, 7-31

overview 1-34

round-trip time (RTT)

Acceptable RTT value 9-30, 9-38

Acceptable Zone value 9-30, 9-39

assigning to static entries 9-46

DRP agent 9-3

Equivalence Window 9-28

one-way delay (CRA) 6-22

overview 9-2

probing methods 9-5

proximity database entries 9-5

refresh probe interval 9-28

RTT

See round-trip time (RTT)

running-config command 10-31

S

sample BIND zone configuration 7-48

scripted-kal

clear statistics 10-91

Scripted keepalive

global keepalive configuration 5-15

overview 1-28

statistics 10-42

server load balancer 1-2, G-10

service provider G-11

shared keepalive

creating 5-21

deleting 5-38, 5-39

error messages A-15

HTTP HEAD configuration settings 5-28

ICMP configuration settings 5-24, 5-32

KAL-AP configuration settings 5-30

modifying 5-37

overview 5-21

TCP configuration settings 5-26

show ddos-config command 10-26

show statistics command 10-2

boomerang 10-3

dns 10-4

dns answer 10-5

dns answer group 10-8

dns domain 10-10

dns domain-list 10-11

dns global 10-12

dns proximity rule 10-14, 10-47

dns rule 10-14

dns sticky rule 10-19, 10-58

dpragent 10-20

keepalive 10-31

keepalive cra 10-32

keepalive global 10-33

keepalive http-head 10-37

keepalive icmp 10-39

keepalive kalap 10-40

keepalive ns 10-44

keepalive tcp 10-45

proximity database 10-48

proximity group-name 10-50

proximity group-summary 10-49

proximity lookup 10-51

proximity probe 10-52, 10-53

scripted keepalive 10-42

source-address 10-17

source-address-list 10-18

sticky 10-58

sticky global 10-60

sticky group-name 10-68

sticky group-summary 10-67

sticky mesh 10-65

SOA records 1-4, 1-5, 1-9

configuring for negative responses 1-6

format 1-4

TTL fields 1-5

sort

DNS rules 7-43

removing 7-47

Sort icon 1-54

source address

Anywhere 1-19, 3-1

blocks 1-19, 3-1

hit counts 10-101

maximum per source address list 3-1

overview 1-19

statistics, monitoring 10-17

source address and domain hash balance method 1-35, 7-24, 7-31

source address list

adding addresses 3-3

address blocks 3-4

anywhere 1-19

Anywhere (default) 3-1

creating 3-1, 3-2

current members 3-4

definition G-11

deleting 3-7

DNS Rule Wizard 7-9

error messages A-24

general configuration 3-3

maximum addresses 3-1

modifying 3-5

overview 1-18

removing addresses 3-6

statistics, monitoring 10-18

SSL

See Secure Socket Layer

standby GSSM

database, synchronized with primary GSSM 1-46

definition 1-46

overview 1-15

statistics

answer hit counts 10-93

answer keepalive 10-94

answer status 10-97

clearing 10-90

clearing DDoS 10-90

DNS rule hit count 10-98

global 10-109

hosted domains 10-100

proximity database 10-111

proximity DNS rule hit count 10-110

proximity lookup 10-113

proximity probe 10-114

source address 10-101

sticky database 10-71, 10-118

sticky DNS rule hit count 10-117

sticky global mesh 10-120

traffic management, monitoring 10-109

statistics-global command 10-28

sticky

balance clause, enabling for 8-25

by domain, enabling 8-25

by domain list, enabling 8-25

clearing statistics 10-91

configuring from CLI 8-26

configuring from GUI 8-16

conflict resolution 8-7

database entries, deleting 8-31

database statistics, monitoring 10-58, 10-118

disabling 8-17, 8-24

disabling/enabling local sticky on a GSS 8-37

DNS Rule Builder, adding to 8-22

DNS rule hit count statistics, monitoring 10-117

DNS rule overview 8-21

DNS rule statistics, monitoring 10-19, 10-58

dumping sticky database entries 8-33, B-1

error messages A-26

global sticky mesh authentication 8-20

global sticky mesh configuration 8-18

global sticky mesh encryption 8-19

global sticky mesh statistics, monitoring 10-65, 10-80

global sticky messaging statistics, monitoring 10-60, 10-73, 10-76

global sticky overview 8-5

global sticky peer mesh 8-5

group statistics, monitoring 10-67, 10-68, 10-89

inactivity timeout 8-4, 8-17, 8-25

loading sticky database entries 8-36

local sticky overview 8-2

mask, specifying 8-17

mesh favored peer 8-9, 8-20

overview 8-2

periodic sticky database backup 8-35

quick start guide 8-10

results of locally disabling on a GSS 8-37

statistics, monitoring (CLI) 10-57

statistics, monitoring (GUI) 10-109

status, monitoring (CLI) 10-57

sticky database overview 8-3

sticky global mesh statistics, monitoring 10-120

sticky group, creating 8-30

sticky group, deleting 8-31

sticky group deletion 8-31

sticky group overview 8-28

subsystem statistics, monitoring 10-69

XML schema file B-1

sticky database

age-out process 8-4

automatic backup 8-33

dumping entries 8-33

loading entries 8-36

matched entry 8-4

maximum number of entries 8-4

overview 8-3

periodic backup 8-35

specifying entry format to dump 8-34, B-1

statistics 10-71

sticky entries, deleting 8-31

sticky inactivity timeout 8-4, 8-17, 8-25

sticky group

creating 8-30

deleting 8-31

entering multiple groups 8-30

IP address block, deleting 8-31

overview 8-28

subdomains, delegation 1-45, 7-48

Submit icon 1-56

subscriber G-11

suspending

all answer groups for an owner 6-42

all answers in a location 6-27

all answers in an answer group 6-42

all DNS rules by owner 7-41

answer 6-26

answer group 6-40

DNS rule 7-38

synchronization of primary and standby GSSM 1-46

T

TCP keepalive

destination port 5-8, 6-13

global keepalive configuration 5-7

overview 1-27

shared keepalive configuration 5-26

statistics 10-45

termination method 5-8, 5-27, 6-14

VIP answer 6-13

Time To Live G-12, G-13

Tools tab 1-50

traffic management

load balancing overview 1-38

proximity, configuring 9-26

proximity overview 1-39

proximity zone, configuring 9-17

statistics, monitoring 10-109

sticky, configuring 8-16

sticky overview 1-38

Traffic Mgmt tab 1-50

troubleshooting GUI error messages A-1

TTL

See Time To Live

U

user interface

details windows 1-52

icons 1-54

list windows 1-51

navigation 1-53

organization 1-50

understanding 1-48

user view error messages A-28

V

VIP

answer groups 6-29

answers 6-3

balance method options 1-36

balance methods 6-29, 7-24, 7-31

http-head, clear statistics 10-91

icmp, clear statistics 10-91

kal-ap, clear statistics 10-91

keepalive type 1-27

tcp, clear statistics 10-91

VIP answer overview 1-22

VIP answer

answer types 6-10

creating 6-3

HTTP HEAD keepalive 6-15

ICMP keepalive 6-11, 6-19

KAL-AP keepalive 6-17

multiple answers and ports, specifying 1-32, 6-8

multi-port 1-25, 6-3

TCP keepalive 6-13

VIP keepalive type

HTTP HEAD 1-27

ICMP 1-27

KAL-AP 1-28

Scripted keepalive 1-28

TCP 1-27

VIP-type answer, multi-port 1-25, 1-57, 6-3

W

weight

balance method overview 1-37, 7-20

least loaded 1-37

round-robin 1-37

weighted round robin

balance method 1-34, 7-24, 7-32

overview 1-34

wildcards

in domains 4-5, 7-14

maximum length in domain names 4-5, 7-14

wizard

creating DNS rules 7-6

DNS Rule Wizard 7-2

overview 7-2

X

XML

dumping proximity database entries in XML format 9-50

dumping sticky database entries in XML format 8-34

Z

zone configuration file (DNS)

modifying 7-48

sample 7-48