{"id":44669,"date":"2024-08-30T11:25:22","date_gmt":"2024-08-30T15:25:22","guid":{"rendered":"https:\/\/mjtsai.com\/blog\/?p=44669"},"modified":"2024-08-30T11:25:22","modified_gmt":"2024-08-30T15:25:22","slug":"macos-firewall-slows-dns-queries","status":"publish","type":"post","link":"https:\/\/mjtsai.com\/blog\/2024\/08\/30\/macos-firewall-slows-dns-queries\/","title":{"rendered":"macOS Firewall Slows DNS Queries"},"content":{"rendered":"<p><a href=\"https:\/\/lapcatsoftware.com\/articles\/2024\/8\/6.html\">Jeff Johnson<\/a> (<a href=\"https:\/\/www.reddit.com\/r\/MacOS\/comments\/1eqvz3p\/dns_query_delay_when_macos_firewall_is_enabled\/\">Reddit<\/a>):<\/p>\n<blockquote cite=\"https:\/\/lapcatsoftware.com\/articles\/2024\/8\/6.html\">\n<p>I took packet traces of the DNS queries with the firewall enabled and disabled. What I found is that the DNS query response packet consistently arrives in under 20 milliseconds after the query packet is sent, regardless of whether the firewall is enabled. Thus, it appears that the extra query time added by the firewall is caused by on-device processing of the packets rather than by any network issue.<\/p>\n<p>[&#8230;]<\/p>\n<p>On my MacBook Pro running Sonoma, but not on my Mac mini running Sonoma, I frequently experience a bizarre issue where the <code>dig<\/code> command takes over 5 seconds to complete when the firewall is enabled.<\/p>\n<\/blockquote>\n<p>DNS queries are <em>several times<\/em> slower, however this may be fixed in Sequoia.<\/p>","protected":false},"excerpt":{"rendered":"<p>Jeff Johnson (Reddit): I took packet traces of the DNS queries with the firewall enabled and disabled. What I found is that the DNS query response packet consistently arrives in under 20 milliseconds after the query packet is sent, regardless of whether the firewall is enabled. Thus, it appears that the extra query time added [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"apple_news_api_created_at":"2024-08-30T15:25:28Z","apple_news_api_id":"80623329-01fa-46c6-b99f-b5546dfba33e","apple_news_api_modified_at":"2024-08-30T15:25:28Z","apple_news_api_revision":"AAAAAAAAAAD\/\/\/\/\/\/\/\/\/\/w==","apple_news_api_share_url":"https:\/\/apple.news\/AgGIzKQH6Rsa5n7VUbfujPg","apple_news_coverimage":0,"apple_news_coverimage_caption":"","apple_news_is_hidden":false,"apple_news_is_paid":false,"apple_news_is_preview":false,"apple_news_is_sponsored":false,"apple_news_maturity_rating":"","apple_news_metadata":"\"\"","apple_news_pullquote":"","apple_news_pullquote_position":"","apple_news_slug":"","apple_news_sections":"\"\"","apple_news_suppress_video_url":false,"apple_news_use_image_component":false,"footnotes":""},"categories":[2],"tags":[728,1204,30,1891,2077,2223,2385,2598,476],"class_list":["post-44669","post","type-post","status-publish","format-standard","hentry","category-technology","tag-domain-name-system-dns","tag-firewall","tag-mac","tag-macos-11-0","tag-macos-12","tag-macos-13-ventura","tag-macos-14-sonoma","tag-macos-15-sequoia","tag-networking"],"apple_news_notices":[],"_links":{"self":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/44669","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/comments?post=44669"}],"version-history":[{"count":1,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/44669\/revisions"}],"predecessor-version":[{"id":44670,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/44669\/revisions\/44670"}],"wp:attachment":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/media?parent=44669"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/categories?post=44669"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/tags?post=44669"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}