Can we use DNS access layer to make static name resolution entries?

Products

• ProxySG Software - SGOS

Issue/Introduction

DNS access layer is not meant to be used to force the proxy to resolve specific host names to specific IP addresses without consulting the configured DNS servers while doing normal forward proxy operation, it is meant only to be used when using the Proxy IP as a DNS server on the local computers TCP/IP configuration, then policies on the DNS access layer will start to apply.

 

In order to do so, DNS service shall be intercepted on the proxy.

Resolution

Proxy SG does not offer the option to add or edit something like hosts file in Windows environment to force DNS resolution without consulting DNS servers, Proxy SG has to query the listed DNS servers for every request unless this host resolution result is already cached in the proxy DNS cache from a previous DNS query response.

 

The option to do some specific static name resolution mapping, is to configure a local DNS server IP on the DNS server list, and this DNS server shall be configured with such static DNS entries; in other words a local DNS server needs to be deployed.