[Mozilla Enterprise] [EXTERNAL] Re: Inquiry: how to disable network traffic via cloudfare-dns and trr.dns.nextdns.io?

[Hoang (US), Victor T]

Thanks, this might be exactly what I need. Appreciate the quick response!

Victor

From: Mike Kaply <mkaply at mozilla.com>
Sent: Tuesday, June 9, 2020 2:47 PM
To: Hoang (US), Victor T <victor.t.hoang at boeing.com>
Cc: enterprise at mozilla.org
Subject: [EXTERNAL] Re: [Mozilla Enterprise] Inquiry: how to disable network traffic via cloudfare-dns and trr.dns.nextdns.io?


This message was sent from outside of Boeing. Please do not click links or open attachments unless you recognize the sender and know that the content is safe.




We do have policies to disable:

https://github.com/mozilla/policy-templates/blob/master/README.md#dnsoverhttps

and you can safely disable with no side effects. It will just go back to your DNS (which you probably want anyway).

Some folks probably ended up in a test cohort or new installs are asked if they want to use DNS over HTTPS.

Mike


On Tue, Jun 9, 2020 at 4:17 PM Hoang (US), Victor T <victor.t.hoang at boeing.com<mailto:victor.t.hoang at boeing.com>> wrote:
Hello all,

It’s been several months since I’ve deployed 68 ESR to my company. I’ve been notified by some folks over in the network/security team who are noticing that Firefox is increasing the network traffic onto cloudfare-dns and trr.dns.nextdns.io<http://trr.dns.nextdns.io>. Seems like it’s a firefox feature that’s on by default based on what I can find on google related to this article: https://support.mozilla.org/en-US/kb/firefox-dns-over-https (sorry i probably sound like I live under a rock).

These folks are asking if there are alternatives to this solution because it is causing huge network traffic spikes in our proxy. I checked and I don’t have DNS over HTTPS enabled in the network settings, so I’m not sure how they’re seeing this. Anyone know if its possible to disable it via policies.json and what this might mean without it?

Thanks,
Victor Hoang
_______________________________________________
Enterprise mailing list
Enterprise at mozilla.org<mailto:Enterprise at mozilla.org>
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit https://mail.mozilla.org/listinfo/enterprise or send an email to enterprise-request at mozilla.org<mailto:enterprise-request at mozilla.org> with a subject of "unsubscribe"
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.mozilla.org/pipermail/enterprise/attachments/20200609/e9a2ccab/attachment.html>