A giant leap for BlueCat Integrity

The release of Integrity 9.0 improves hybrid cloud and automation support, enhances reliability and visibility, boosts security, and simplifies upgrades.

moon
Key takeawaysThis key takeaway was generated through LLMs crawling the page and coming up with an overview of the content.

BlueCat released Integrity version 9.0, a DNS-focused platform update that addresses hybrid cloud adoption, automation, reliability, security, and upgrade simplicity for enterprise network operations. The release adds Azure deployment support for BlueCat Address Manager, enhanced DDNS Dual-Stack Mixed-Mode for seamless IPv4/IPv6 mobility, expanded APIs for replication, trust relationships and session-based admin access, and Gateway automation enhancements. It also introduces streaming replication and improved replication visibility (including SNMP polling), stronger group-level admin controls via TACACS/LDAP and brute-force mitigations, and an upgrade path that preserves replication for future releases.

What hybrid cloud and mobility improvements are included in Integrity 9.0?

Integrity 9.0 adds Azure deployment capability for BlueCat Address Manager to better support hybrid cloud environments, aligning with customers moving compute and infrastructure to the cloud. It introduces enhanced dynamic DNS (DDNS) support for dual‑stack DHCP clients called DDNS Dual-Stack Mixed-Mode (DSMM), which enables seamless roaming and uninterrupted service when users move between networks or between IPv4 and IPv6. Together these features enable Adaptive DNS deployments across on-prem and cloud infrastructure while maintaining consistent name/IP resolution during client transitions.

How does Integrity 9.0 improve replication reliability and operational visibility?

The release implements streaming replication to improve database replication over the prior method and removes the need to reboot the primary BlueCat Address Manager during replication-related management operations, increasing service uptime and API availability. The UI has been enhanced to show replication health and latency, and SNMP has been extended so administrators can poll full replication health and individual node status for integration with SNMP-based monitoring systems. Additionally, the UI can establish secure trust channels between two or three Address Manager instances to be used for upgrades and replication operations.

What security and upgrade process enhancements does Integrity 9.0 provide?

Security enhancements include group-level admin access management through TACACS and LDAP with the ability to grant temporary admin-level access and retain auditing, plus login protections such as forced password change on first login, user lockout, and delayed login to reduce brute-force attacks. On the upgrade side, Integrity 9.0 introduces changes that simplify future upgrades: for releases after 9.0, customers upgrading from 9.0 or later will not need to break replication to proceed, supporting high availability requirements and smoother upgrade workflows.

This week we’re excited to release a new version of BlueCat Integrity, which brings next level DNS to our customers through significant new features and enhancements. Watch what BlueCat’s Andrew Wertkin has to say about it in this three-minute preview:

Here are the four key areas where we’ve made significant improvements:

Hybrid environments and automation

Our customers are rapidly moving compute and infrastructure to the cloud, and we continue to deliver capabilities to deploy Adaptive DNS to support hybrid cloud environments. The latest version of Integrity adds the ability to deploy BlueCat Address Manager in Azure environments.

Integrity 9.0 also introduces enhanced dynamic DNS (DDNS) support for dual-stack DHCP clients, also known as DDNS Dual-Stack Mixed-Mode (DSMM). DSMM enables a seamless environment with no disturbances in service. In other words, employees can unplug their laptop from a docking station, walk across the office, and maintain support between different networks as well as between IPv4 and IPv6.

On the automation front, we’ve made some significant improvements to the BlueCat API. We’re releasing new APIs for replication and trust relationships as well as user sessions for facilitating temporary admin access. We’ve enhanced our APIs for improved IP management and also enriched existing APIs with a view towards the automation needs of our customers.

Finally, we’re also making some significant updates to BlueCat Gateway, our automation platform. We think you’re going to be very excited about where we’re going with Gateway. So much so that we’re going to save that for another upcoming blog!

Enhanced reliability and visibility

The upcoming 9.0 release of Integrity introduces streaming replication, which improves database replication compared with the previous approach. Furthermore, reboots of the primary BlueCat Address Manager during replication-related management operations are no longer needed. By removing this limitation, Integrity 9.0 increases service uptime and API availability and removes any risk related to reboots, such as extended boot times due to file system checks.

And we’ve enhanced our UI to provide easier insight into replication health and latency. SNMP is also enhanced, allowing administrators to poll the full replication health and get the status of each node, making the information that exists in the UI accessible to SNMP-based monitoring systems. The UI has also been updated to establish a secure trust channel between two or three BlueCat Address Managers. This secure channel is used for upgrades and database replication operations.

Strengthened security

We’ve done quite a bit from a security standpoint as well. One of the big areas is managing group-level admin access through TACACS and LDAP, offering the ability to provide temporary admin-level access but also include audit ability.

In addition to other enhancements in the UI, we’ve also implemented improvements to reduce brute force attacks with features like delaying the login, user lockout capabilities, and forcing password change on first login.

Simplified upgrades

Finally, we’ve made some updates to our upgrade process that will benefit customers and support their high availability requirements. For all releases following 9.0, when a customer upgrades from 9.0 (or a later release), they will not have to break replication in order to move forward and/or to upgrade.

Integrity version 9.0 is now available for BlueCat customers and we think that you’ll be just as excited as we are about everything that we’ve put into this release!

This is what next level DNS looks like.


Published in:


An avatar of the author

BlueCat provides core services and solutions that help our customers and their teams deliver change-ready networks. With BlueCat, organizations can build reliable, secure, and agile mission-critical networks that can support transformation initiatives such as cloud adoption and automation. BlueCat’s growing portfolio includes services and solutions for automated and unified DDI management, network security, multicloud management, and network observability and health.

Related content

Close-up of interlocked metal chain links symbolizing connected network objects and relationships in IPAM

How to map your network with user-defined links in Integrity X

Map your network with user-defined links in Integrity X to define and manage custom relationships, such as dual-stack and NAT environments.

Read more
Flock of geese flying in formation across a blue sky, framed by a pink graphic border, symbolizing coordinated network migrat

Automate your DDI modernization path by migrating with Micetro

Automate cross-platform DNS and DHCP migration with Micetro to reduce risk, eliminate manual effort, and modernize infrastructure faster.

Read more
Three armored figures walking toward a futuristic Las Vegas skyline with pyramids, glowing orb, and "Welcome to Fabulous Las

Your journey to intelligent NetOps begins at Cisco Live

Visit BlueCat’s booth or book a meeting now to learn more about how our solutions can help you build a network that supports constant change.

Read more
Stacked colorful wooden directional arrows on a post by a calm seaside with distant hills and blue sky

Replace BIND and ISC with Micetro DNS/DHCP Server (MDDS)

Tired of patching and manually configuring BIND DNS and ISC DHCP? Discover how Micetro MDDS appliances can replace them for modern DDI.

Read more