OPERATIONAL DEFECT DATABASE
...
...
DNS resolution fails for hostnames that can be resolved only by internal Network Access DNS. DNS Relay Proxy does not properly forward DNS requests to internal DNS servers when the virtual server is accessed using a hostname. Note: This problem does not occur when the same APM virtual server is accessed by IP address.
-- DNS resolution does not work for hostnames that can be resolved only by internal Network Access DNS server. -- DNS resolution (using ping or via browser) works for other hostnames that can be resolved by local DNS. -- nslookup does not work for any hostname.
-- DNS relay proxy is present. -- IP filtering engine is enabled. -- Split tunnel config with no DNS-include space. -- Access virtual server by hostname. -- Running Microsoft Windows v10.
You can use either of the following workarounds: Note: nslookup can be enabled only with workaround #2. 1. While specifying split tunnel configuration, make sure DNS scope is also split by specifying the include DNS scope in the configuration. With this workaround, ping and browser work while accessing hostnames that can be resolved only by internal Network Access DNS. DNS requests received on the physical adapter will be forwarded to the internal Network Access DNS server when the scope pattern matches. 2. This workaround involves modifying the Windows Registry. Note this warning from Microsoft about modifying the registry: "Warning: Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall the operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk." Add the following key: -- HKLM\SOFTWARE\Policies\Microsoft\Windows NT\DnsClient -- Set DWORD "EnableMultiHomedRouteConflicts" to 0 (zero). This workaround restores Windows DNS client behavior to pre-Windows 10, so DNS relay proxy will create listeners on loopback for incoming requests, and the driver will redirect DNS requests to the listener on the loopback. The IP filtering engine allows all traffic on loopback, so DNS resolution via ping, browser, and nslookup all work as expected.
Now the Windows Edge Client DNS Relay Proxy service correctly forwards requests to client-local DNS servers if the name resolution is not avilable on the APM-local DNS servers.
Click on a version to see all relevant bugs
F5 Integration
Learn more about where this data comes from
Bug Scrub Advisor
Streamline upgrades with automated vendor bug scrubs
BugZero Enterprise
Wish you caught this bug sooner? Get proactive today.
