[dns-operations] 220.127.116.11 does not support ECS for Https record?
songlinjian at gmail.com
Fri Mar 5 03:33:39 UTC 2021
It is reported that people in China who use IOS14 and 18.104.22.168 received
unexpected responses. The typical example is that a name configured with
cname_1 for queries from China, cname_2 for queries out of China.
IOS14 sends A/AAAA/HTTPs queries now. And if the HTTPs record is firstly be
queried to one 22.214.171.124 resolver (most likely out of China), the cname_2
with scope /0 is cached without ECS support. The following A/AAAA will be
impacted. So the queries from China will most likely receive cname_2.
Before 126.96.36.199 fix the problem, it is suggested that the IOS14 applications
that use cname should consider using one cname instead of two or more
cnames for different links. it is also suggested that IOS14 users change to
resolvers inside of China, resolver of ISP or public resolver like AliDNS
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the dns-operations