Tunnelling

DNS tunnelling

DNS tunnelling encodes data in query names and answers to create a constrained communications channel, a pattern with both legitimate and harmful uses.

tunnellingtransportrecord types

Date updated:

Screenshot used in the talk for DNS tunnelling
Screenshot used in the original talk. Select the image to view it full size.

DNS tunnelling encodes data into query names and responses, then uses DNS as a transport channel. The idea was discussed publicly as early as 2000.

Many record types can carry pieces of a tunnel. The later entries in this section show what people built on top of that basic pattern.