Sign in
policy

Retrieves the list of DNS lookups intercepted from an endpoint.

Retrieves the list of DNS lookups intercepted from the specific endpoint, optionally filtered by endpoint id, DNS name, CIDR IP range or source.

get/fqdn/cache/{id}

Path parameters

idstring required

String describing an endpoint with the format [prefix:]id. If no prefix is specified, a prefix of cilium-local: is assumed. Not all endpoints will be addressable by all endpoint ID prefixes with the exception of the local Cilium UUID which is assigned to all endpoints.

Supported endpoint id prefixes:

  • cilium-local: Local Cilium endpoint UUID, e.g. cilium-local:3389595
  • cilium-global: Global Cilium endpoint UUID, e.g. cilium-global:cluster1:nodeX:452343
  • cni-attachment-id: CNI attachment ID, e.g. cni-attachment-id:22222:eth0
  • container-id: Container runtime ID, e.g. container-id:22222 (deprecated, may not be unique)
  • container-name: Container name, e.g. container-name:foobar (deprecated, may not be unique)
  • pod-name: pod name for this container if K8s is enabled, e.g. pod-name:default:foobar (deprecated, may not be unique)
  • cep-name: cep name for this container if K8s is enabled, e.g. pod-name:default:foobar-net1
  • docker-endpoint: Docker libnetwork endpoint ID, e.g. docker-endpoint:4444

Query parameters

matchpatternstring

A toFQDNs compatible matchPattern expression

cidrstring

A CIDR range of IPs

sourcestring

Source from which FQDN entries come from

Response

Success

ipsstring[]

IP addresses returned in this lookup

fqdnstring

DNS name

ttlinteger

The TTL in the DNS response

lookup-timestring date-time

The absolute time when this data was received

expiration-timestring date-time

The absolute time when this data will expire in this cache

endpoint-idinteger

The endpoint that made this lookup, or 0 for the agent itself.

sourcestring

The reason this FQDN IP association exists. Either a DNS lookup or an ongoing connection to an IP that was created by a DNS lookup.

Changes