When it comes to denial of service or DNS security, F5 is not the best vendor as dedicated vendors such as Arbor for denial of service and Infoblox for DNS security offer more comprehensive solutions. The main features such as WAF and load balancing do not generate complaints. F5 BIG-IP DNS is not the best for DNS denial of service because they handle it as part of BIG-IP features, mainly used for GSLB, while other vendors provide complete DDI solutions, including DHCP, DNS, and IP address management, along with specialized DNS security, offering much more than just GSLB and basic recursive DNS security. The two main concerns are DNS related and denial of service, areas where F5 BIG-IP DNS could improve, and they could do better as they are not the best vendor, indicating ample room for improvement especially since those are not their main specialties.
