Skip to main content
Flexible Top Header

Recently active topics

15
D
dittmanAuthenticated Nodes
 Integrity
Let's Encrypt Certs in 25.1 vs. 9.6.1

I’ve upgraded my lab to 25.1 and have found that the Let’s Encrypt certs aren’t working as expected.  I don’t see errors in Firefox or Chrome but code to check the certs are failing against 25.1 with the error “ Certificate validation error: FQDN-25.1 [unable to get local issuer certificate]” which lead me to test with curl.I’m wondering if anyone else is seeing the same issue or is this something I’m doing wrong.This is the error I see with “curl -v https://FQDN/”:root@bam:~# curl -v https://FQDN/* Trying 10.0.10.26:443...* Connected to FQDN (10.0.10.26) port 443 (#0)* ALPN: offers h2,http/1.1* TLSv1.3 (OUT), TLS handshake, Client hello (1):* CAfile: /etc/ssl/certs/ca-certificates.crt* CApath: /etc/ssl/certs* TLSv1.3 (IN), TLS handshake, Server hello (2):* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):* TLSv1.3 (IN), TLS handshake, Certificate (11):* TLSv1.3 (OUT), TLS alert, unknown CA (560):* SSL certificate problem: unable to get local issuer certificate* Closing connec

4713
D
massodec
massodecProvisioned Rookie
 Integrity
replicate in API v2 the behaviour of 'excludeDHCPRange=false' from v1 API

Hello,We are migrating our "legacy" v1 API scripts for BAM 9.6.1 to v2 API.In one of those tools, we use v1 "POST /Services/REST/v1/assignNextAvailableIP4Address" to look for a free static IP address. This endpoint provides parameter 'excludeDHCPRange=false' to easily avoid assigning static IP addresses from DHCP Ranges.To achieve the same outcome in v2 API, we should use v2 "POST /api/v2/networks/{collectionId}/addresses" with the 'x-bcn-excluded-addresses' header.But that header is not a Boolean but a list of IPRanges.We're thinking on populating that 'x-bcn-excluded-addresses' header with the output of another API call to "GET /api/v2/networks/{collectionId}/ranges".But even this approach is pretty straight-forward, it feels we are over complicating the process.Are we missing something? Is there any easier way to achieve in v2 API the same behaviour from v1 'excludeDHCPRange=false' ?Thank you very much.

252
massodec
moni.veronese
moni.veroneseCommunity Manager
 Layer 8 Lounge
[Poll] Help us decide the next Layer 8 topic

Hey all, We have had a blast hosting the last couple Layer 8 calls and it’s time for another one. Here are a couple of options we are thinking about for our next communtiy discussion. Please vote below to have your input considered.

110
moni.veronese
moni.veronese
moni.veroneseCommunity Manager
 Integrity
Notes from the Integrity X community discussion posted in the group

Posting here for anybody subscribed to the Integrity channel The notes have been posted in the Layer 8 Lounge Group: Join the Layer 8 Lounge group to keep up to date with ​​​future events and notes from the calls👉 https://community.bluecatnetworks.com/groups/layer-8-lounge-43

60
moni.veronese
moni.veronese
moni.veroneseCommunity Manager
 Layer 8 Lounge
Notes and answers from the Integrity X Community Discussion

Integrity X Release – Layer 8 Lounge This article was created based on community questions and feedback gathered during the Layer 8 Lounge event for the Integrity X 25.1 release. The content is derived from the live chat transcript and reflects common questions, feature clarifications, and product insights discussed during the session.General FeaturesQ: Is the language change global or per user?A: Language change is per user, selectable from the main page.Q: Is dark mode available?A: Yes, dark and light modes are selectable per user via the top-right icon.Q: Can the reporting tab be delegated to non-admins?A: Yes, it is accessible under Global. Role-Based Access Control (RBAC)Q: Will there be more granular RBAC options (e.g., via tags)?A: This is under future consideration. Performance & Load TestingQ: Has Integrity X been load tested for large-scale environments (e.g., thousands of DDNS updates)?A: Yes. BlueCat runs stress tests using the largest customer loads at 4x speed consist

120
moni.veronese
moni.veronese
moni.veroneseCommunity Manager
 Integrity
Integrity X Videos: RESTful API Automation, New UI, Metrics & Visualization and TaggingTutorial

New Integrity X Videos We’ve published 4 new videos to walk you through some of whats new in Integrity X.Each video covers a different theme:  Automation with RESTful APIs New UI  Tagging  Metrics and Visualization A new UI, built for the way you work  Integrity X introduces a fully modern, accessible, and intuitive interface — purpose-built to empower every user. Whether you’re provisioning DHCP, managing IP space, or investigating DNS issues, the UI puts the power of the platform at your fingertips without the noise or clutter. Designed for speed, optimized for clarity, and compliant with WCAG 2.2 AA — it’s a UI every team can work with confidence.Watch the 2-minute UI walkthrough Automation-first. API-Powered.If you can do it in the UI, you can automate it. Integrity X is built entirely on a RESTful API, which also powers the product itself. Use the UI to bootstrap API calls, explore parameters via OpenAPI spec, and even kickstart AI-assisted provisioning. Whether you're build

310
moni.veronese
moni.veronese
moni.veroneseCommunity Manager
 Integrity
[Video] Proactive DDI Monitoring with BlueCat Integrity X: Real-Time Metrics & VisualizationsTutorial

Most DDI teams only know there’s a problem when users start calling – but what if you spotted issues before they impact your network? In this demo, see how BlueCat Integrity X 25.1 delivers real-time, always-on metrics with a native Prometheus-based telemetry system. Watch live dashboards for Address Manager servers and DNS/DHCP appliances, zoom in on spikes in QPS and LPS, and identify suspect traffic to suspicious domains in under ten minutes. Then, export your top clients and queries for security forensics and apply a Response Policy Zone (RPZ) black-hole rule in a single click.But we don’t stop there: pull your Integrity X telemetry into Grafana for custom heatmaps, trending visualizations, and long-term retention, or stream data through vector into Splunk, Elastic, Kafka, and more for full-stack observability. By combining real-time dashboards with automated policy enforcement, Integrity X turns reactive firefighting into proactive service assurance.

1470
moni.veronese
moni.veronese
moni.veroneseCommunity Manager
 Integrity
Integrity X UI Overview
[Video] BlueCat Integrity X: Unified, Modern DDI UI in Action (3-min Overview)Tutorial

 In just three minutes you’ll see:0:12 – Language-aware login (7 UI languages)0:24 – Vertical React interface & customizable header0:42 – Quick Actions + Favorites for one-click tasks1:05 – Smarter tables and powerful filters1:20 – Global Search and Advanced Search (names, IPs, tags, settings)1:55 – Real-time metrics & 14-day history dashboards2:06 – WCAG 2.1 AA accessibility: dark mode, keyboard nav, high contrast2:24 – API-first: every click is an OpenAPI call you can automateWhy it matters?Accelerates workflows for NetOps, SecOps, Cloud, and DevOps teams Eliminates legacy plug-ins and tool sprawl Built-in observability for proactive issue resolution Designed for global, inclusive teams from day one

330
moni.veronese
moni.veronese
moni.veroneseCommunity Manager
 Integrity
[Video] How BlueCat Integrity X Transforms DDI with Metadata & Automation
[Video] How BlueCat Integrity X Transforms DDI with Metadata & AutomationTutorial

Managing enterprise DDI shouldn’t feel like searching in the dark. In this demo, see how tagging in BlueCat Integrity X brings clarity, context, and control to your DNS, DHCP, and IP address data — turning manual work into powerful automation.From tracking PCI-compliant assets to surfacing business-critical infrastructure for Cardiology teams, tagging in Integrity X enables rapid filtering, targeted reporting, and delegation of control at scale. Whether you're responding to audit requests or powering API-based automation, tags give your team a smarter way to work.🎯 What you’ll learn:How tags and tag groups work across DNS, DHCP, IPAM, and devices How to apply and manage tags through the UI and API Real-world use cases: audit support, business unit filtering, and governance The difference between tags vs. UDFs (User Defined Fields) How tagging integrates with search, export, access controls, and automation

1150
moni.veronese
moni.veronese
moni.veroneseCommunity Manager
 Integrity
[Video] From Clicks to Code with RESTful API Automation — Integrity X
[Video] From Clicks to Code with RESTful API Automation — Integrity XTutorial

Modern DDI teams can’t afford slow, manual workflows. In this demo, see how BlueCat Integrity X’s unified RESTful API and the API-first UI turn every click into reusable code—so you can discover, test, and automate network changes in minutes, not hours.What you’ll learn: 0:00 — Intro: why API-first matters0:20 — UI-driven API calls (DevTools reveal GET/filters)1:35 — Interactive Swagger docs: build, tweak, and run queries2:55 —  Import OpenAPI spec into Postman for rapid testing4:50 — Python scripting demo: bulk-create CIDR subnets + tags5:38 — Wrap-up: integrate with Terraform, Ansible & moreWhy it mattersInstant visibility into every API call Copy-and-paste cURL snippets for fast proof-of-concept Full OpenAPI spec for Postman, CI/CD & automation pipelines Scale repeatable DDI tasks with Python, Terraform, Ansible

1690
moni.veronese
christopher.nielsen
christopher.nielsenNetwork VIP Newbie
 Integrity
V2 API create wildcard host record via address API /api/v2/networks/{collection-id}/addresses

I’m attempting to do a POST to /api/v2/networks/{collection-id}/addresses to grab an IP address and put a DNS name on it. This is working find except when I attempt to add a wildcard DNS entry like the following:{    "name": "*.example.net",                             ← This puts a name on the IPv4 address object    "type": "IPv4Address",    "state": "STATIC",    "userDefinedFields": {        "mnemonic": "OCP"    },    "resourceRecords": [        {            "type": "HostRecord",            "absoluteName": "*.example.net",               ← This should put a host record into the example.net zone            "views": [                {                    "id": "93864"                }            ],            "userDefinedFields": {                "mnemonic": "OCP"            }        }    ]}  {    "status": 400,    "reason": "Bad Request",    "code": "InvalidFullyQualifiedDomainName",    "message": "The value for resource field 'resourceRecords[0].absoluteName' is not a valid fully quali

272
christopher.nielsen
moni.veronese
moni.veroneseCommunity Manager
 Integrity
Introducing BlueCat Integrity X
Introducing BlueCat Integrity XNew Release

We are thrilled to unveil the latest updates in our product lineup: BlueCat Integrity X, 25.1. This release represents a transformative step forward in our DNS, DHCP, and IP address management solutions. It empowers IT teams seeking a single platform for complete visibility and control over critical network services.What’s new with Integrity X?At BlueCat, we are committed to creating a unified, intuitive DDI management platform built for the future. Integrity X represents a monumental leap forward in our DDI partnership with customers: it is an innovative release that highlights our unwavering commitment to developing resilient and future-proof solutions that scaleWe’re not just here to help complete manual DDI tasks; we’re here to ignite a visionary transformation, enabling our customers to reimagine how they accomplish work with remarkable speed and efficiency using automation. We’re proud to deliver a release that provides a UI/UX that bridges the gap between manual DDI management a

1143
moni.veronese
T
tmaestasActive Endpoint
 Integrity
Integrity GSSTSIG support

Since ISC has announced the deprecation of the tkey-gssapi-credential and tkey-domain configuration statements in BIND, both of which are used by Integrity’s current GSSTSIG implementation, can we PLEASE use the refactoring opportunity to get better support for multi-realm GSSTSIG and keytab management?  We currently have to use postDeploy.sh scripting to get the resulting configuration that we want (jettisoning the BAM-generated single-realm keytab and substituting our own, commenting out the BAM-generated tkey-gssapi-credential and tkey-domain statements, and substituting a tkey-gssapi-keytab statement). Ideally BAM should either A) natively support generating a keytab that contains the needed principals and referencing it via the tkey-gssapi-keytab configuration statement (which is ISC’s go-forward requirement) or B) allow the user to import their own keytab and reference that (as other competing products do).I’m sure I have a feature-request for multi-realm support floating around

100
T
moni.veronese
moni.veroneseCommunity Manager
 General community discussion
Tracking overlapping IP space - Community discussion

What are the various methods for tracking overlapping IP space today? If you know some medieval ways, let us know.credit for this discussion topic to ​@mark.mikhail!  

647
rharolde
rharolde
rharoldeDNS/DHCP/IPAM at U of Michigan
 Integrity
UDL - User Defined Link

I would be interested in how people are using UDLs in real life.  I have not used them yet, but it seems like I probably should somewhere.

160
rharolde

Badge winners

  • BCIA Product User
    leeme1has earned the badge BCIA Product User
  • Integrity Product User
    leeme1has earned the badge Integrity Product User
  • NVIP 2.0 Founding Member
    leeme1has earned the badge NVIP 2.0 Founding Member
  • NVIP 2.0 Founding Member
    rghitshas earned the badge NVIP 2.0 Founding Member
  • Gateway Product Expert
    Davehas earned the badge Gateway Product Expert
Show all badges
Terms & ConditionsCookie settings