-
Notifications
You must be signed in to change notification settings - Fork 4
Open
Labels
bugExisting functionality isn't behaving as expectedExisting functionality isn't behaving as expecteddeveloper advocacyDeveloper Advocacy related tasksDeveloper Advocacy related tasks
Description
When using a DNS server that poisons loopback (127.0.0.1) resolution (i.e. to block DNS rebinding attacks), the DNS resolution check takes a long time before erroring out. We should lower this threshold - DNS should resolve nearly instantly.
Steps to reproduce:
- Use a DNS server which blocks loopback resolution
- If you don't have one already, go to NextDNS and hit "try it now"
- Go to Security > DNS Rebinding Protection and enable it
- Go back to Setup and hit "Link IP" on the right hand side
- Use the DNS server IPs provided
- Verify failing lookup by using
dig test.altis.dev- you should seeOPT=15: 00 11 42 6c 6f 63 6b 65 64 20 62 79 20 4e 65 78 74 44 4e 53 ("..Blocked by NextDNS")
composer server start- Observe wait time for DNS resolution after startup
Acceptance criteria:
- ...
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
bugExisting functionality isn't behaving as expectedExisting functionality isn't behaving as expecteddeveloper advocacyDeveloper Advocacy related tasksDeveloper Advocacy related tasks