When using a DNS server that poisons loopback (127.0.0.1) resolution (i.e. to block DNS rebinding attacks), the DNS resolution check takes a long time before erroring out. We should lower this threshold - DNS should resolve nearly instantly.
Steps to reproduce:
- Use a DNS server which blocks loopback resolution
- If you don't have one already, go to NextDNS and hit "try it now"
- Go to Security > DNS Rebinding Protection and enable it
- Go back to Setup and hit "Link IP" on the right hand side
- Use the DNS server IPs provided
- Verify failing lookup by using
dig test.altis.dev - you should see OPT=15: 00 11 42 6c 6f 63 6b 65 64 20 62 79 20 4e 65 78 74 44 4e 53 ("..Blocked by NextDNS")
composer server start
- Observe wait time for DNS resolution after startup
Acceptance criteria:
When using a DNS server that poisons loopback (127.0.0.1) resolution (i.e. to block DNS rebinding attacks), the DNS resolution check takes a long time before erroring out. We should lower this threshold - DNS should resolve nearly instantly.
Steps to reproduce:
dig test.altis.dev- you should seeOPT=15: 00 11 42 6c 6f 63 6b 65 64 20 62 79 20 4e 65 78 74 44 4e 53 ("..Blocked by NextDNS")composer server startAcceptance criteria: