TheDNSMuseum
← Back to collection

Tunnelling

HTTP over DNS

A browser tunnel encodes arbitrary request strings in DNS subdomain labels and reconstructs them at the far end, showing the overhead of HTTP over DNS.

HTTPtunnelproof of concept

Date updated:

Screenshot used in the talk for HTTP over DNS
Screenshot used in the original talk.

HTTP is verbose, yet it can be encoded into a series of small DNS exchanges. The slide demonstrates the architecture and its limits.

This entry is intentionally descriptive. A future abuse section can add defensive indicators and response advice with the FIRST DNS Abuse SIG context.

Primary source: https://github.com/veggiedefender/browsertunnel