Peaks of qtype HTTPS

Frederico A C Neves fneves at registro.br
Wed Jul 27 14:39:31 UTC 2022


Starting yesterday we're observing large peaks of HTTPS (Type65)
queries hitting our auth servers.

Current interval is ~4h. Peaks are 40% larger than regular traffic.

No rcode 0/3 pattern change. Qname and Sources are totally spread,
initial investigation shows that many are not regular caching
resolvers.

Not an operational issue but I would like to know if others are also
observing this.

On the speculation side, perhaps this report could serve as feedback
for the one deploying this client software as this could be an
unexpected behaviour... before this became an issue.

[]s
Fred



More information about the dns-operations mailing list