In a proxy chaining environment which proxy is responsible for DNS lookups
Article ID: 171778
Updated On:
Products
Issue/Introduction
You need to know which proxy, the child (the proxy closest to users) or the parent proxy, (the proxy the child proxy forwards traffic to) will do DNS resolution of forwarded traffic
Environment
Proxy chaining is configured
Clients are set up to explicitly connect to the child proxy
Resolution
By default the parent proxy is responsible for doing DNS resolutions of traffic that the child proxy forwards to it.
The child proxy will only do DNS resolution if the traffic is not being forwarded (direct traffic) or if the child proxy contains policy which requires the proxy to do a DNS lookup. If neither of these two conditions are met the child proxy will function correctly without a DNS server configured.
Note: Some services that are configured on the proxy may require DNS resolution be done by the child proxy, Dynamic Real Time Rating (DRTR) is one example. To avoid this you can set up DRTR to forward DNS requests to the parent proxy see DRTR Health Check fails on child proxy
Feedback
