behavior property

String? behavior
getter/setter pair

Answer this query with a behavior rather than DNS data. Possible string values are:

  • "behaviorUnspecified"
  • "bypassResponsePolicy" : Skip a less-specific Response Policy Rule and let the query logic continue. This mechanism, when used with wildcard selectors, lets you exempt specific subdomains from a broader Response Policy Rule and direct the queries to the public internet instead. For example, if the following rules exist: *.example.com -> LocalData 1.2.3.4 foo.example.com -> Behavior 'passthrough' A query for foo.example.com skips the wildcard rule. This functionality also facilitates allowlisting. Response Policy Zones (RPZs) can be applied at multiple levels within the hierarchy: for example, an organization, a folder, a project, or a VPC network. If an RPZ rule is applied at a higher level, adding a passthrough rule at a lower level will override it. Queries from affected virtual machines (VMs) to that domain bypass the RPZ and proceed with normal resolution.

Implementation

core.String? behavior;