<div dir="ltr">Bobby Tables?</div><br><div class="gmail_quote"><div dir="ltr">On Tue, 17 Jan 2017 at 23:33 Robert Edmonds <<a href="mailto:edmonds@mycre.ws">edmonds@mycre.ws</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">That's no ordinary load balancer. Those are tunneled database lookups!<br class="gmail_msg">
(My favorite obfuscation is hex-encoding IPv4 addresses into the QNAME.)<br class="gmail_msg">
<br class="gmail_msg">
<a href="http://www.cafepress.com/nxdomain/8592477" rel="noreferrer" class="gmail_msg" target="_blank">http://www.cafepress.com/nxdomain/8592477</a><br class="gmail_msg">
<br class="gmail_msg">
Warren Kumari wrote:<br class="gmail_msg">
> ... because let's all write our own load-balancer.<br class="gmail_msg">
> Can't be that hard, can it?!<br class="gmail_msg">
><br class="gmail_msg">
> W<br class="gmail_msg">
> On Tue, Jan 17, 2017 at 1:12 PM Ondřej Surý <<a href="mailto:ondrej.sury@nic.cz" class="gmail_msg" target="_blank">ondrej.sury@nic.cz</a>> wrote:<br class="gmail_msg">
><br class="gmail_msg">
> > Hi,<br class="gmail_msg">
> ><br class="gmail_msg">
> > if you know anybody at McAfee/Intel Cloud DNS team, could you pass<br class="gmail_msg">
> > them contact to me or at least this message?<br class="gmail_msg">
> ><br class="gmail_msg">
> > <a href="http://local.cloud.mcafee.com" rel="noreferrer" class="gmail_msg" target="_blank">local.cloud.mcafee.com</a> fails to respond to 0x20 DNS queries, but only<br class="gmail_msg">
> > in a specific part of the QNAME.<br class="gmail_msg">
> ><br class="gmail_msg">
> ><br class="gmail_msg">
> > <a href="http://b-0.19-23003008.1481.1518.19cf.3ea1.410.0.ekzijnekvvvg7gb38qcwur561b.avqs.mcafee.com" rel="noreferrer" class="gmail_msg" target="_blank">b-0.19-23003008.1481.1518.19cf.3ea1.410.0.ekzijnekvvvg7gb38qcwur561b.avqs.mcafee.com</a>.<br class="gmail_msg">
> > WORKS<br class="gmail_msg">
> ><br class="gmail_msg">
> ><br class="gmail_msg">
> > <a href="http://B-0.19-23003008.1481.1518.19CF.3EA1.410.0.ekzijnekvvvg7gb38qcwur561b.avqs.mcafee.com" rel="noreferrer" class="gmail_msg" target="_blank">B-0.19-23003008.1481.1518.19CF.3EA1.410.0.ekzijnekvvvg7gb38qcwur561b.avqs.mcafee.com</a>.<br class="gmail_msg">
> > WORKS<br class="gmail_msg">
> ><br class="gmail_msg">
> ><br class="gmail_msg">
> > <a href="http://b-0.19-23003008.1481.1518.19cf.3ea1.410.0.ekzijnekvvvg7gb38qcwur561B.avqs.mcafee.com" rel="noreferrer" class="gmail_msg" target="_blank">b-0.19-23003008.1481.1518.19cf.3ea1.410.0.ekzijnekvvvg7gb38qcwur561B.avqs.mcafee.com</a>.<br class="gmail_msg">
> > FAILS (with NXDOMAIN)<br class="gmail_msg">
> ><br class="gmail_msg">
> > So only 0x20 changes in 'ekzijnekvvvg7gb38qcwur561b' label makes the query<br class="gmail_msg">
> > return NXDOMAIN<br class="gmail_msg">
> ><br class="gmail_msg">
> > Cheers,<br class="gmail_msg">
> > --<br class="gmail_msg">
> >  Ondřej Surý -- Technical Fellow<br class="gmail_msg">
> >  --------------------------------------------<br class="gmail_msg">
> >  CZ.NIC, z.s.p.o.    --     Laboratoře CZ.NIC<br class="gmail_msg">
> >  Milesovska 5, 130 00 Praha 3, Czech Republic<br class="gmail_msg">
> >  mailto:<a href="mailto:ondrej.sury@nic.cz" class="gmail_msg" target="_blank">ondrej.sury@nic.cz</a>    <a href="https://nic.cz/" rel="noreferrer" class="gmail_msg" target="_blank">https://nic.cz/</a><br class="gmail_msg">
> >  --------------------------------------------<br class="gmail_msg">
<br class="gmail_msg">
--<br class="gmail_msg">
Robert Edmonds<br class="gmail_msg">
_______________________________________________<br class="gmail_msg">
dns-operations mailing list<br class="gmail_msg">
<a href="mailto:dns-operations@lists.dns-oarc.net" class="gmail_msg" target="_blank">dns-operations@lists.dns-oarc.net</a><br class="gmail_msg">
<a href="https://lists.dns-oarc.net/mailman/listinfo/dns-operationsdns-operations" rel="noreferrer" class="gmail_msg" target="_blank">https://lists.dns-oarc.net/mailman/listinfo/dns-operations<br class="gmail_msg">
dns-operations</a> mailing list<br class="gmail_msg">
<a href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations" rel="noreferrer" class="gmail_msg" target="_blank">https://lists.dns-oarc.net/mailman/listinfo/dns-operations</a></blockquote></div>