DNS Egress Policy

DNS Egress Policy is a networking outbound control that decides where workloads may send traffic for name resolution and delegation. It uses allowlists, identity, and logging so teams can reduce exfiltration and SSRF risk while keeping evidence, reliability, and public-safe operational boundaries clear.

“The network engineering team used DNS Egress Policy when a resolver returned stale data, so the team could reduce exfiltration and SSRF risk before traffic crossed a service boundary.”