forward domains are not cached? maybe CNAME not cached?

[bcookatpcsd]

OT: (I have thousands of chromebooks.. holiday weekend coming up.. students are home with devices.. )

before any changes..

[2022-11-18 20:08:51]   10.20.245.3     beacons.gvt2.com        HTTPS   PASS    0ms     -
[2022-11-18 20:08:51]   10.20.245.3     beacons.gvt2.com        A       PASS    0ms     -
[2022-11-18 20:08:52]   10.20.245.3     beacons3.gvt2.com       AAAA    SYNTH   0ms     -
[2022-11-18 20:08:52]   10.20.245.3     beacons3.gvt2.com       HTTPS   PASS    0ms     -
[2022-11-18 20:08:52]   10.20.245.3     beacons3.gvt2.com       A       PASS    0ms     -
[2022-11-18 20:08:52]   10.20.245.3     beacons.gcp.gvt2.com    AAAA    SYNTH   0ms     -
[2022-11-18 20:08:52]   10.20.245.3     beacons.gcp.gvt2.com    A       PASS    0ms     -
[2022-11-18 20:08:52]   10.20.245.3     beacons.gcp.gvt2.com    HTTPS   PASS    0ms     -
[2022-11-18 20:08:53]   10.20.245.3     beacons.gvt2.com        A       PASS    0ms     -
[2022-11-18 20:08:53]   10.20.245.3     beacons.gvt2.com        AAAA    SYNTH   10ms    -
[2022-11-18 20:08:53]   10.20.245.3     beacons.gvt2.com        HTTPS   PASS    10ms    -
[2022-11-18 20:08:53]   10.20.245.3     beacons4.gvt2.com       AAAA    SYNTH   1ms     -
[2022-11-18 20:08:53]   10.20.245.3     beacons4.gvt2.com       A       PASS    1ms     -
[2022-11-18 20:08:53]   10.20.245.3     beacons4.gvt2.com       HTTPS   PASS    2ms     -
[2022-11-18 20:08:57]   10.20.245.3     beacons.gcp.gvt2.com    A       PASS    0ms     -
[2022-11-18 20:08:57]   10.20.245.3     beacons.gcp.gvt2.com    HTTPS   PASS    0ms     -
[2022-11-18 20:08:57]   10.20.245.3     beacons4.gvt2.com       A       PASS    0ms     -
[2022-11-18 20:08:57]   10.20.245.3     beacons4.gvt2.com       HTTPS   PASS    0ms     -
[2022-11-18 20:09:03]   10.20.245.3     beacons.gvt2.com        HTTPS   PASS    0ms     -
[2022-11-18 20:09:03]   10.20.245.3     beacons.gvt2.com        A       PASS    0ms     -
[2022-11-18 20:09:03]   10.20.245.3     beacons.gvt2.com        HTTPS   PASS    0ms     -
[2022-11-18 20:09:03]   10.20.245.3     beacons.gvt2.com        A       PASS    1ms     -
[2022-11-18 20:09:04]   10.20.245.3     beacons.gcp.gvt2.com    A       PASS    0ms     -
[2022-11-18 20:09:04]   10.20.245.3     beacons.gcp.gvt2.com    HTTPS   PASS    0ms     -
[2022-11-18 20:09:04]   10.20.245.3     beacons.gvt2.com        A       PASS    0ms     -
[2022-11-18 20:09:04]   10.20.245.3     beacons.gvt2.com        HTTPS   PASS    0ms     -

the gvt2 domain is cached

add:

gvt1.com 8.8.8.8
gvt2.com 8.8.8.8
gvt3.com 8.8.8.8

to the foward_rules; and restart

[2022-11-18 20:07:57]   10.20.245.3     e2cs43.gcp.gvt2.com     AAAA    SYNTH   0ms     -
[2022-11-18 20:07:57]   10.20.245.3     e2cs43.gcp.gvt2.com     A       FORWARD 14ms    8.8.8.8:53
[2022-11-18 20:07:57]   10.20.245.3     e2cs43.gcp.gvt2.com     HTTPS   FORWARD 15ms    8.8.8.8:53
[2022-11-18 20:07:57]   10.20.245.3     e2c33.gcp.gvt2.com      A       FORWARD 14ms    8.8.8.8:53
[2022-11-18 20:07:57]   10.20.245.3     e2c33.gcp.gvt2.com      HTTPS   FORWARD 21ms    8.8.8.8:53
[2022-11-18 20:08:00]   10.20.245.3     beacons.gvt2.com        A       FORWARD 11ms    8.8.8.8:53
[2022-11-18 20:08:00]   10.20.245.3     beacons.gvt2.com        HTTPS   FORWARD 18ms    8.8.8.8:53
[2022-11-18 20:08:02]   10.20.245.3     e2c45.gcp.gvt2.com      A       FORWARD 14ms    8.8.8.8:53
[2022-11-18 20:08:02]   10.20.245.3     e2c45.gcp.gvt2.com      HTTPS   FORWARD 15ms    8.8.8.8:53
[2022-11-18 20:08:03]   10.20.245.3     beacons.gcp.gvt2.com    A       FORWARD 11ms    8.8.8.8:53
[2022-11-18 20:08:03]   10.20.245.3     beacons.gcp.gvt2.com    HTTPS   FORWARD 13ms    8.8.8.8:53

ipv6_servers and block_ipv6 are blocked..

so AAAA is SYNTH

but all gvt2.com seems to always be forwarded and never cached.. (HTTPS is its own problem.. )

[2022-11-18 20:07:35]     10.20.245.3     beacons.gvt2.com        A       FORWARD 13ms    8.8.8.8:53
[2022-11-18 20:07:35]     10.20.245.3     beacons.gvt2.com        A       FORWARD 15ms    8.8.8.8:53
[2022-11-18 20:07:35]     10.20.245.3     beacons.gvt2.com        A       FORWARD 8ms     8.8.8.8:53
[2022-11-18 20:07:42]     10.20.245.3     beacons.gvt2.com        A       FORWARD 289ms   8.8.8.8:53
[2022-11-18 20:07:43]     10.20.245.3     beacons.gvt2.com        A       FORWARD 13ms    8.8.8.8:53
[2022-11-18 20:07:47]     10.20.245.3     beacons.gvt2.com        A       FORWARD 15ms    8.8.8.8:53
[2022-11-18 20:07:49]     10.20.245.3     beacons.gvt2.com        A       FORWARD 15ms    8.8.8.8:53
[2022-11-18 20:07:49]     10.20.245.3     beacons.gvt2.com        A       FORWARD 12ms    8.8.8.8:53
[2022-11-18 20:08:00]     10.20.245.3     beacons.gvt2.com        A       FORWARD 11ms    8.8.8.8:53
[2022-11-18 20:08:06]     10.20.245.3     beacons.gvt2.com        A       FORWARD 13ms    8.8.8.8:53
[2022-11-18 20:08:07]     10.20.245.3     beacons.gvt2.com        A       FORWARD 17ms    8.8.8.8:53

 drill beacons.gvt2.com @8.8.8.8
;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 15321
;; flags: qr rd ra ; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;; beacons.gvt2.com.    IN      A

;; ANSWER SECTION:
beacons.gvt2.com.       300     IN      CNAME   beacons6.gvt2.com.
beacons6.gvt2.com.      300     IN      A       142.250.72.99

;; AUTHORITY SECTION:

;; ADDITIONAL SECTION:

;; Query time: 14 msec
;; SERVER: 8.8.8.8
;; WHEN: Fri Nov 18 20:24:02 2022
;; MSG SIZE  rcvd: 73

should be cached for 300 sec..

not cached because it's a CNAME? or not cached because it is in forward?

Thank you in advance.

[jedisct1]

https://github.com/DNSCrypt/dnscrypt-proxy/wiki/Forwarding#forwarding-and-caching