Discuss BlueCat products

We often have users delete A records, but neglect the “Delete linked IP address if orphaned” checkbox. This results in IP addresses that are unused, but in the web UI they still appear with a blue icon (state = “STATIC”) instead of gray icon (state = “UNASSIGNED”). I am trying to search a subnet for unused IP addresses, that are statically assigned but with no records pointing to them. I’m able to get the network easily enough.url = f"{self.url_base}/networks&filter=range:eq('{target_cidr}')"And then I’m able to get a list of all the IP addresses in the network easily enoughurl = f"{self.url_base}/networks/{network['id']}/addresses(I was also able to use a filter to get “UNASSIGNED” addresses in one go. Worked great, if only that was all I needed to get).I’m able to loop over all the IP addresses. This works perfectly fine, but performance is terrible, because I’m hitting the API for every IP address, 100ms per call * 300 calls = 30 sec to complete. By comparison when I browse the

Hi, if it makes any difference, I do have a support contract with Bluecat, so I can open official support requests if that’s a good approach for me. I haven’t done that yet. I figured I’d reach out to the community first.My first question is to ensure the direction I’m going is the most recommended direction. I have BlueCat Address Manager. I’m not sure which of these version strings is useful when asking a question here in the forum.  ;-) When I browse to the BAM and click on Help, there is no “About” to simply tell me the version of BAM we have. There is Help > API Documentation, it says version “9.5 RESTful v2 API.” I couldn’t figure out how to query system-info using API v2, but when I query the version from “/system-info” via API v1, I get version string “'9.5.1-049.GA.bcn'”.I want to automate creation/deletion of CNAME records to support cert automation. I can use any language or tool, including python, terraform, or anything else. My first question is what’s recommended? So f

I am using API v2 to retrieve all RR in a zone.I use the call “/api/v2/zones/<id>/resourceRecords”In parsing the output, in the case of TXT, SRV, Generic Records I get directly the rdata in the json() .But in case of a HostRecord I need to use the json()[‘data’]['_links']['addresses']['href'] to make an additional API call to get the actual IPv4 addresses of the RR.Problem: I am dealing with a huge zone ( > 300’000 entries), and this takes a long time…..Is there a way to retrieve directly with a single API call the RR of a zone with all the data, kind of a dump of a zone?  

The migration doc says v1 “POST /Services/REST/v1/addExternalHostRecord” becomes “POST /api/v2/zones/{collectionId}/resourceRecords”, but there is no ‘zone’ for an ExternalHost record.  So what collectionId should I use? 

Hi Community,  we are planning to implement the Global Server Selector and as of now i’m wondering how the custom healthchecks are working. We can archive what we need we the onboard healthchecks but I’m curious how the custom healthchecks are working since it is no where described how to really implement one.  Has anybody already implemented a custom healthcheck and can share more insights on them?  Thx 

I’m often asked when I speak to customers and prospects about how to use the Micetro REST API. Hopefully this little guide will help…Getting started with Micetro APIs Some background on the various APIs that Micetro supports for automationhttps://docs.menandmice.com/en/latest/guides/user-manual/automation/Public link to REST/SOAP API documentation for all Micetro versionshttps://api.menandmice.com/Although all APIs continue to be supported it’s recommended going forward that customers focus on the REST API Swagger InterfaceMicetro includes a swagger interface which as well as documenting the REST API also allows you to test and try out API calls. This can be accessed by appending /mmws/api/doc/ to your Micetro web gui. Eg:http[s]://micetro.yourdomain.tld/mmws/api/docMicetro swaggerStarting with version 11.1 we now support Bearer tokens. Follow the link to sessions Eg:Fill out your credentials then click execute –Then click on authorise and copy the session returned in the response body

Can anyone from Bluecat comment on the factors that went into the implementation choices for local RPZ zones? Rather than managing actions record-by-record in an RPZ, Integrity writes out a default policy for each zone in the named.conf (and then writes all the records’s (“response policy items” in BAM parlance) rdata as “CNAME .” in the zone file.)This means ALL response policy items in a given response policy (zone) have the same action.  If you want a different action, you have to create a different response policy - and BIND has an upper limit of 64 RPZs.  So essentially I can only have 64 unique responses via local RPZ under Integrity.RPZ itself (natively, in BIND) is much more flexible.  For any given RPZ I can have thousands of records in them each with their own unique action.  So if I have a one-off DNS zone or particular FQDN I want to override resolution for, I don’t have a burn one of my 64 available zones to do so, as Integrity is forcing us to do - I just place the record

Would be great if we can use BAM to view all cloud DHCP logs, monitor leases and MAC addresses. much easier than trying to run tools or create query statements just to find a DHCP lease for particular MAC. Does BlueCat have a roadmap and/or plans monitoring cloud DHCP lease data? May in the future pull this data into BAM from CDV?

I am wondering is the Integrity release replacing/upgrade to BlueCat Address Manager or is it a completely different product?

LiveAction is now part of the BlueCat family, bringing market-leading network performance monitoring (NPM) to Integrity users. Get a full picture of your network- from DNS-level insights to comprehensive traffic flows and performance monitoring across all protocols.[Learn more]

I would love to get the community’s thoughts on this topic.When working with Edge Service Points and various Edge services such DNS Resolver Service (DRS), Identity, Discovery etc, do you prefer to manage services and more specifically updates to services individually or would much rather prefer that the service updates be bundled inside the Service Point update (somewhat similar to BDDS and BIND/DHCPD package versions)?Since the launch of Service Points v4 we allow services to be independently deployed and upgraded as long as the service point version allows for that specific service version to run. As more services are added, is it getting complex to manage them individually? If you have another view on this please reply to this post. Looking forward to responses! :D

We are going to roll out BCIA, so if anyone has any good tips I’d love to hear them.