[dba-Tech] DNS fronting

[Jim Lawrence]

DNS Fronting has provided protection and security to many internet organizations who post from within restrictive regimes or for any business not wanting to tracked or blocked. Many large companies have these features built into their internet infrastructure.

It is almost like using a subnet address. Countries wishing to block the free flow of information or stop what can be described as piracy find it almost impossible to do so. If an company/country blocks the "subnet" they block the entire domain; for example; they block Google and then all legitimate business grinds to a halt. An unacceptable price to pay in our modern world. 

I found this subject fascinating and if you are interested, check out the following article:

https://www.bamsoftware.com/papers/fronting/

Jim