---
title: "Retrieves the list of DNS lookups intercepted from an endpoint."
method: GET
path: "/fqdn/cache/{id}"
tags: ["policy"]
---

# Retrieves the list of DNS lookups intercepted from an endpoint.

`GET /fqdn/cache/{id}`

Retrieves the list of DNS lookups intercepted from the specific endpoint,
optionally filtered by endpoint id, DNS name, CIDR IP range or source.

## Path parameters

- `id` string, required

## Query parameters

- `matchpattern` string
- `cidr` string
- `source` string

## Response `200`

Success

- DNSLookup[]
  - `ips` string[] — IP addresses returned in this lookup
  - `fqdn` string — DNS name
  - `ttl` integer — The TTL in the DNS response
  - `lookup-time` string, date-time — The absolute time when this data was received
  - `expiration-time` string, date-time — The absolute time when this data will expire in this cache
  - `endpoint-id` integer — The endpoint that made this lookup, or 0 for the agent itself.
  - `source` string — The reason this FQDN IP association exists. Either a DNS lookup or an ongoing connection to an IP that was created by a DNS lookup.

## Other responses

- `400` — Invalid request (error parsing parameters)
- `404` — No DNS data with provided parameters found

---

[API](https://skmtc.net/cilium/apis/cilium-api.md) · [All operations](https://skmtc.net/cilium/apis/cilium-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/cilium/cilium-api/versions/351336b27221/schema)