4 ms·
Since you're blocking some DNS requests, do you think a portion of the usage might be retries? If one DNS request could turn into querying all the addresses in
by cbanek 9y ago
Since you're blocking some DNS requests, do you think a portion of the usage might be retries? If one DNS request could turn into querying all the addresses in your list, I could see an amplification attack happening, and then that happening also on a retry. Look for patterns in querying the individual names?
- stanlarroque 9y agoI do not block these requests. However I am pretty sure Apple does some DNS tunneling. Also, some iOS specific requests happen when there is no other DNS activity at all.
- cbanek 9y ago> However I am pretty sure Apple does some DNS tunneling. That seems very reasonable. It would be better than hardcoding IP addresses and safer than straight DNS for management things. Maybe their implementation of that doesn't have a very long TTL?