Networking Blog

The Official Blog Site of the Windows Core Networking Team at Microsoft

Options
21.5K
tojens on May 02 2024 06:00 AM
5,490
tojens on May 02 2024 06:00 AM
2,190
AditiPatange on Apr 25 2024 06:00 AM
37.6K
JamesKehr on Apr 18 2024 12:10 PM
8,504
tojens on Mar 07 2024 07:00 AM
6,149
tojens on Feb 06 2024 06:00 AM
1,830
Kyle Bisnett on Feb 02 2024 09:10 AM
11.8K
AditiPatange on Oct 25 2023 10:00 AM
11.2K
JamesKehr on Jul 05 2023 03:21 PM
4,596
Dan Cuomo on Jul 05 2023 10:13 AM
6,003
Dan Cuomo on Jun 09 2023 09:38 AM
5,376
Kyle Bisnett on Mar 16 2023 09:28 AM
9,766
Basel_Kablawi on Mar 15 2023 10:15 AM
7,026
Kyle Bisnett on Jan 17 2023 12:50 PM
5,868
Basel_Kablawi on Jan 06 2023 03:10 PM
8,022
Dan Cuomo on Nov 15 2022 06:01 AM
8,002
Dan Cuomo on Nov 15 2022 06:00 AM
6,476
Kyle Bisnett on Oct 12 2022 10:05 AM
15.4K
Daniel Havey on Sep 30 2022 08:50 AM
7,494
huanyi on Sep 16 2022 03:36 PM
11.7K
Dan Cuomo on Aug 31 2022 08:38 AM
7,457
Kyle Bisnett on Aug 30 2022 02:58 PM
6,989
Kyle Bisnett on Aug 25 2022 10:31 AM
53.1K
tojens on Jul 13 2022 10:00 AM
14.2K
nibanks on May 24 2022 09:56 AM
27.3K
tojens on Apr 22 2022 09:00 AM
73.7K
JamesKehr on Apr 04 2022 01:36 PM
9,986
tojens on Apr 01 2022 09:00 AM

Latest Comments

@Christian Schindler Today, DoH and DoT are not supported by the Windows DNS server which means ZTDNS during preview relies on third-party DNS servers. However, I know the owners of the Windows DNS server and they've said that they plan to support DoH in a future version of Windows Server. To your o...
0 Likes
My question is: Will Windows DNS support DoH/DoT. Or how are we supposed to configure those servers? Managing all the DNS names that users in an enterprise are allowed to access seems like a hassle to me....
0 Likes
@Alex_HQuest Ideally, the SSH server is identified by domain name (which is where an SSH client could use SSHFP records to verify the expected server fingerprint as well!), but in that case where it's IP only, yes: ZTDNS would have to be aware of it as an exception. I will say in our selfhosting so ...
0 Likes
When applications and services try to send IPv4 or IPv6 traffic to an IP address that was not learned through ZTDNS (and is not on the manual exceptions list), the traffic will be blocked. This is not because ZTDNS tried to identify malicious or forbidden traffic to block, but because the traffic wa...
0 Likes
@bentrigger Not at the moment. Deploying ZTDNS is going to be an incremental, difficult-to-manage process for enterprise admins that requires heavy infra and attention to get right without regressing device connectivity. It's worth it to achieve the kind of Zero Trust lockdown such admins are seekin...
0 Likes