Network Extension and DoH with preresolved IPs

App & System Services Networking
deteam444 OP
Created 5h
Replies 0
Boosts 0
Views 10
Participants 1

Howdy,

I've noticed a strange behavior recently on my macos (26.5.1) when using my System Extension-hosted Network Extension with a Packet Tunnel Provider inside:

let dnsSettings = NEDNSOverHTTPSSettings(servers: ["8.8.8.8", "8.8.4.4"])
dnsSettings.serverURL = URL(string: "https://dns.google/dns-query")
settings.dnsSettings = dnsSettings

I have always expected this block to not need any DNS resolution, since IPs for dns.google are preconfigured, however not sure it's been the case lately. I see normal DNS requests to the addresses above to :53. Once resolved, no more DNS traffic, just :443 via TUN.

Is it possible that some changes were introduced in the past months that would make macos to have to resolve dns.google with regular DNS before switching over to DoH?

Replies  0
Boosts  0
Views  10
Participants  1
Network Extension and DoH with preresolved IPs
First post date Last post date
 
 
Q