Cause: Egress networkpolicies with dnsName rules would refresh the IP list corresponding to that name once the TTL of the record expired. Consequence: The cache may expire before the record and the next query may return a different ip address list causing the new connection packets' to be dropped Fix: For records that last less than one hour, query them every 30 seconds. For records that last over an hour, query them ever 30 minutes. Result: The cache is less likely to expire making drops less likely as well. Besides because it happens every 30 seconds new connections that fail will probably wait less to be reopened.