{"slug":"troubleshoot-dns-errors-for-internal-services","title":"Troubleshoot DNS errors for internal services","tags":["tailscale","networking","dns"],"agent_summary":"Last validated: Mar 16, 2026","trigger_phrases":[],"runnable":false,"markdown":"\r\n# Troubleshoot DNS errors for internal services\r\n\r\nLast validated: Mar 16, 2026\r\n\r\nSome DNS servers have a feature called DNS rebinding protection. This can prevent a [particular type of security issue](https://en.wikipedia.org/wiki/DNS_rebinding) but can impact the ability to access your internal services, particularly those hosted behind a subnet router using [private IP addresses](https://www.rfc-editor.org/rfc/rfc1918.html). Some DNS servers might also apply this policy to the [Tailscale IP address](https://tailscale.com/docs/concepts/tailscale-ip-addresses) range (addresses defined in [RFC6598](https://www.rfc-editor.org/rfc/rfc6598.html)).\r\n\r\nThis issue can affect home routers (for example, [Google Wi-Fi](https://support.google.com/googlenest/answer/9144137)), corporate DNS servers, and internet service provider (ISP) DNS servers.\r\n\r\nFor troubleshooting guidance, refer to [DNS problems with internal services and DNS rebinding protection](https://tailscale.com/docs/reference/faq/dns-rebinding).\r\n\r\n![Project Logo](https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed)\r\n\r\nAsk AI\r\n\r\nreCAPTCHA\r\n\r\nRecaptcha requires verification.\r\n\r\nprotected by **reCAPTCHA**\r\n","html":"<h1>Troubleshoot DNS errors for internal services</h1>\n<p>Last validated: Mar 16, 2026</p>\n<p>Some DNS servers have a feature called DNS rebinding protection. This can prevent a <a href=\"https://en.wikipedia.org/wiki/DNS_rebinding\">particular type of security issue</a> but can impact the ability to access your internal services, particularly those hosted behind a subnet router using <a href=\"https://www.rfc-editor.org/rfc/rfc1918.html\">private IP addresses</a>. Some DNS servers might also apply this policy to the <a href=\"https://tailscale.com/docs/concepts/tailscale-ip-addresses\">Tailscale IP address</a> range (addresses defined in <a href=\"https://www.rfc-editor.org/rfc/rfc6598.html\">RFC6598</a>).</p>\n<p>This issue can affect home routers (for example, <a href=\"https://support.google.com/googlenest/answer/9144137\">Google Wi-Fi</a>), corporate DNS servers, and internet service provider (ISP) DNS servers.</p>\n<p>For troubleshooting guidance, refer to <a href=\"https://tailscale.com/docs/reference/faq/dns-rebinding\">DNS problems with internal services and DNS rebinding protection</a>.</p>\n<p><img src=\"https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed\" alt=\"Project Logo\"></p>\n<p>Ask AI</p>\n<p>reCAPTCHA</p>\n<p>Recaptcha requires verification.</p>\n<p>protected by <strong>reCAPTCHA</strong></p>\n"}