Networking Blog

The Official Blog Site of the Windows Core Networking Team at Microsoft

Options
20K
tojens on May 02 2024 06:00 AM
5,115
tojens on May 02 2024 06:00 AM
2,176
AditiPatange on Apr 25 2024 06:00 AM
37.5K
JamesKehr on Apr 18 2024 12:10 PM
8,500
tojens on Mar 07 2024 07:00 AM
6,146
tojens on Feb 06 2024 06:00 AM
1,827
Kyle Bisnett on Feb 02 2024 09:10 AM
11.8K
AditiPatange on Oct 25 2023 10:00 AM
11.2K
JamesKehr on Jul 05 2023 03:21 PM
4,591
Dan Cuomo on Jul 05 2023 10:13 AM
5,999
Dan Cuomo on Jun 09 2023 09:38 AM
5,373
Kyle Bisnett on Mar 16 2023 09:28 AM
9,762
Basel_Kablawi on Mar 15 2023 10:15 AM
7,023
Kyle Bisnett on Jan 17 2023 12:50 PM
5,864
Basel_Kablawi on Jan 06 2023 03:10 PM
8,015
Dan Cuomo on Nov 15 2022 06:01 AM
7,998
Dan Cuomo on Nov 15 2022 06:00 AM
6,472
Kyle Bisnett on Oct 12 2022 10:05 AM
15.4K
Daniel Havey on Sep 30 2022 08:50 AM
7,491
huanyi on Sep 16 2022 03:36 PM
11.7K
Dan Cuomo on Aug 31 2022 08:38 AM
7,453
Kyle Bisnett on Aug 30 2022 02:58 PM
6,985
Kyle Bisnett on Aug 25 2022 10:31 AM
53.1K
tojens on Jul 13 2022 10:00 AM
14.2K
nibanks on May 24 2022 09:56 AM
27.3K
tojens on Apr 22 2022 09:00 AM
73.7K
JamesKehr on Apr 04 2022 01:36 PM
9,982
tojens on Apr 01 2022 09:00 AM

Latest Comments

@Christian Schindler Today, DoH and DoT are not supported by the Windows DNS server which means ZTDNS during preview relies on third-party DNS servers. However, I know the owners of the Windows DNS server and they've said that they plan to support DoH in a future version of Windows Server. To your o...
0 Likes
My question is: Will Windows DNS support DoH/DoT. Or how are we supposed to configure those servers? Managing all the DNS names that users in an enterprise are allowed to access seems like a hassle to me....
0 Likes
@Alex_HQuest Ideally, the SSH server is identified by domain name (which is where an SSH client could use SSHFP records to verify the expected server fingerprint as well!), but in that case where it's IP only, yes: ZTDNS would have to be aware of it as an exception. I will say in our selfhosting so ...
0 Likes
When applications and services try to send IPv4 or IPv6 traffic to an IP address that was not learned through ZTDNS (and is not on the manual exceptions list), the traffic will be blocked. This is not because ZTDNS tried to identify malicious or forbidden traffic to block, but because the traffic wa...
0 Likes
@bentrigger Not at the moment. Deploying ZTDNS is going to be an incremental, difficult-to-manage process for enterprise admins that requires heavy infra and attention to get right without regressing device connectivity. It's worth it to achieve the kind of Zero Trust lockdown such admins are seekin...
0 Likes