# Need deployment guide specific to DNS Proxy using GLSB

**URL:** <https://community.a10networks.com/t/need-deployment-guide-specific-to-dns-proxy-using-glsb/416>\
**Category:** ADC - Application Delivery\
**Tags:** gslb\
**Created:** [November 8, 2016, 1:24pm UTC](https://community.a10networks.com/t/need-deployment-guide-specific-to-dns-proxy-using-glsb/416 "2016-11-08T13:24:37Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![madyk83](https://avatars.discourse-cdn.com/v4/letter/m/76d3ee/32.png) [@madyk83](https://community.a10networks.com/u/madyk83)\
**Post date:** [November 8, 2016, 1:24pm UTC](https://community.a10networks.com/t/need-deployment-guide-specific-to-dns-proxy-using-glsb/416/1 "2016-11-08T13:24:37Z")

</div>

deployment guide specific to DNS Proxy using GLSB

---

<div class="post-metadata">

**Author:** ![Lawrence\_Ho](https://avatars.discourse-cdn.com/v4/letter/l/c6cbf5/32.png) [@Lawrence\_Ho](https://community.a10networks.com/u/Lawrence_Ho)\
**Post date:** [November 16, 2016, 7:29pm UTC](https://community.a10networks.com/t/need-deployment-guide-specific-to-dns-proxy-using-glsb/416/2 "2016-11-16T19:29:30Z")

</div>

While there isn’t a deployment guide specific to DNS Proxy for GSLB, our GSLB guide in our documentation has some detailed info regarding DNS Proxy.

Documentation can be downloaded here on our website under each code release:

> **[Product Software and Documentation - A10 Support](https://support.a10networks.com/support/axseries)**
>
>  A10 Network customers with a valid support contract can register for an account to download the latest firmware versions, FAQs, application notes, and technical documents.   Log In Register

The primary goals of DNS proxy is for the A10 to modify specific records/responses without making the A10 the authoritative DNS server for a domain/sub-domain.

As a general guideline, for proxy mode you will want to make sure to have your DNS VIP with gslb enable. This VIP will need a service-group with your backend/real dns servers. Before setting up the GSLB features, you will want to make sure that dns traffic is load balanced properly when querying the VIP. (May need to add something like source-nat to the VIP to help with routing)

For GSLB, you will want to configure it normally as if it were authoritative which includes service-ips, sites, policy, and gslb zone+ service. Make sure that the fqdn corresponds to the records you want to change. For this, set the gslb policy with the feature ip-replace. For each record under the zone and service, add the feature as-replace.

I hope this is beneficial to get a basic config working. With all GSLB configuration, most of the tuning is done through the policy. I’d also encourage anyone with complex requirements/deployments to reach out to your SE with A10 .

Lawrence Ho | Professional Services Network Engineer

---

<div class="post-metadata">

**Author:** ![madyk83](https://avatars.discourse-cdn.com/v4/letter/m/76d3ee/32.png) [@madyk83](https://community.a10networks.com/u/madyk83)\
**Post date:** [November 17, 2016, 11:50am UTC](https://community.a10networks.com/t/need-deployment-guide-specific-to-dns-proxy-using-glsb/416/3 "2016-11-17T11:50:25Z")

</div>

thanks for the information Lawrence , i have below question ..

Example if i have purchased domain name called [example.com](http://example.com) from godaddy provider

1\> when we deploy DNS proxy, are we need to add both location (GSLB) DNS public VIP ip in external DNS provider(godaddy) as NS record entry ?

2\> and in A10 we need to add as “A” Record with site name.?

---

<div class="post-metadata">

**Author:** ![Lawrence\_Ho](https://avatars.discourse-cdn.com/v4/letter/l/c6cbf5/32.png) [@Lawrence\_Ho](https://community.a10networks.com/u/Lawrence_Ho)\
**Post date:** [January 24, 2017, 10:22pm UTC](https://community.a10networks.com/t/need-deployment-guide-specific-to-dns-proxy-using-glsb/416/4 "2017-01-24T22:22:42Z")

</div>

1. Yes, you will want the A10 GSLB VIP to be configured as an ns record on your external DNS provider. You could also setup a delegation on the external dns pointing to the A10 GSLB VIP. Another way would be to create a cname record pointing to a different subdomain that the A10 is authoritative for.

2. I think you are referring on how to specify the A10’s responses. This is done under each zone and then under the specific service. Here’s a quick example from the CLI:

gslb zone [example.com](http://example.com)  
service 80 test

```auto
  dns-a-record vip1 static
  dns-a-record vip2 static

```