A NetScaler notices that the DNS responses include IP addresses of all active services. Which parameter should be configured on the gslb vServer to avoid this behavior?

A NetScaler notices that the DNS responses include IP addresses of all active services. Which parameter should be configured on the gslb vServer to avoid this behavior?

• A. EDR DISABLED
• B. EDR ENABLED
• C. MIR ENABLED
• D. MIR DISABLED

Answer: (D)

GSLB DNS replies can either reveal multiple active resource IPs or return a single chosen IP depending on the DNS response mode. The MIR setting on the gslb vServer controls whether the DNS response mirrors all active resources. When MIR is enabled, the reply can include the IPs of all active services, which is exactly what you’re seeing. Disabling MIR stops that behavior, so the DNS response will return only one IP—the one selected by the GSLB policy—reducing exposure of all active endpoints. The other option relates to different DNS response handling, but it won’t address the issue of multiple IPs being returned in the reply. Therefore, turning MIR off is the direct fix.

GSLB DNS replies can either reveal multiple active resource IPs or return a single chosen IP depending on the DNS response mode. The MIR setting on the gslb vServer controls whether the DNS response mirrors all active resources. When MIR is enabled, the reply can include the IPs of all active services, which is exactly what you’re seeing. Disabling MIR stops that behavior, so the DNS response will return only one IP—the one selected by the GSLB policy—reducing exposure of all active endpoints. The other option relates to different DNS response handling, but it won’t address the issue of multiple IPs being returned in the reply. Therefore, turning MIR off is the direct fix.