SRV type requests do not reach the VPN interface

Question

Created Oct ’23

Replies 1

Boosts 0

Participants 2

We have a PacketTunnelProvider in a SystemExtension with split tunnelling. We specify several matching domains using NEPacketTunnelNetworkSettings, such as abc.example.com and xyz.example.com.

DNS requests of type A and AAAA for these domains are routed to the VPN interface, but we've noticed that SRV type requests do not reach the VPN interface. To test this, I'm creating an SRV type request from the terminal using the following command: dig SRV _https._tcp.example.com.

Please guide me if there are any specific configurations required for SRV records.

--Thanks

Happy Questioning and Enjoy

Boost

Answer 1

Systems Engineer OP

Apple

Oct ’23

First, do you have another NEDNSSettings provider or NEDNSProxyProvider enabled on the system? If so then this will not work. Next, I suspect your DNS Settings are getting applied to the interface but just are not being picked up for local traffic whereas the remote destination traffic is. If you do scutil --nc show <uuid> does this provide matching domains that are local or remote?

0