Peaks of qtype HTTPS

Frederico A C Neves fneves at
Wed Jul 27 14:39:31 UTC 2022

Starting yesterday we're observing large peaks of HTTPS (Type65)
queries hitting our auth servers.

Current interval is ~4h. Peaks are 40% larger than regular traffic.

No rcode 0/3 pattern change. Qname and Sources are totally spread,
initial investigation shows that many are not regular caching

Not an operational issue but I would like to know if others are also
observing this.

On the speculation side, perhaps this report could serve as feedback
for the one deploying this client software as this could be an
unexpected behaviour... before this became an issue.


More information about the dns-operations mailing list