Posts

Showing posts from July, 2023

How does DNS resolution work for clients configured with proxy configuration

Image
  If you configure IE with an  explicit  proxy:   e.g. no other options ticked, proxy set to something:8080. User types an address IE checks the address for a  string match against the IE proxy exceptions list  (i.e. "Bypass proxy for these addresses:") a.  If it matches an entry in the  Bypass  list , the  client  uses  its own DNS  to resolve the name, and then the  client connects directly to the target IP address  on port 80 (assumed), then sends a request like: GET /something.htm HTTP/1.1 Host: fulldomainame.example.com b.  If no bypass list entries match , continue: IE connects to its configured proxy , and sends a request of the form: GET http://fulldomainname.example.com/something.htm HTTP/1.1 Bonus factoid: this use of the  FQDN in the URL  is one way you can tell that a client  thinks  it's talking to a proxy instead of a real web server The proxy resolves that host name  u...