---

/bin/sh <<'TB_PUBLIC'
date -u
/usr/sbin/sysctl net.inet.tcp.tso

echo 'Corporate connection and queued bytes:'
netstat -an -p tcp | awk '/194[.]186[.]63[.]/ && /ESTABLISHED/ {print}'

echo 'Routes:'
for tb_target in 1.0.0.1 1.1.1.1 172.21.0.1; do
  /sbin/route -n get "$tb_target" |
    awk '/route to:|gateway:|interface:/ {print}'
done

echo 'Primary DNS resolver, including its actual port:'
/usr/sbin/scutil --dns | awk '
  /^resolver #1$/ {tb=1; next}
  tb && /^resolver #/ {exit}
  tb && /nameserver|port|if_index|flags|reach/ {print}
'

echo 'System proxy enable flags:'
/usr/sbin/scutil --proxy |
  awk '/(HTTPEnable|HTTPSEnable|SOCKSEnable|ProxyAutoConfigEnable|ProxyAutoDiscoveryEnable) :/ {print}'

echo 'Corporate DNS resolving a public website:'
dig @172.21.0.1 one.one.one.one A \
  +time=4 +tries=1 +notcp +ignore +noall +comments +answer

tb_https() {
  /usr/bin/curl -q -4 --http1.1 --noproxy '*' \
    --connect-timeout 8 --max-time 12 -sS -o /dev/null \
    -w 'ip=%{remote_ip} http=%{http_code} bytes=%{size_download} dns=%{time_namelookup} tcp=%{time_connect} tls=%{time_appconnect} first_byte=%{time_starttransfer} total=%{time_total}\n' \
    "$@" 'https://one.one.one.one/'
}

echo 'PUBLIC PAGE: normal DNS'
tb_https

echo 'PUBLIC PAGE: address supplied for this request'
tb_https --resolve one.one.one.one:443:1.0.0.1

echo 'Corporate connection afterward:'
netstat -an -p tcp | awk '/194[.]186[.]63[.]/ && /ESTABLISHED/ {print}'
TB_PUBLIC
Tue Oct  6 13:43:46 UTC 2026
net.inet.tcp.tso: 0
Corporate connection and queued bytes:
tcp4       0   1480  192.168.77.2.65098     194.186.63.25.443      ESTABLISHED
Routes:
   route to: 1.0.0.1
    gateway: 172.21.0.1
  interface: utun10
   route to: 1.1.1.1
    gateway: 172.21.0.1
  interface: utun10
   route to: 172.21.0.1
  interface: utun10
Primary DNS resolver, including its actual port:
  search domain[29] : discovery-portal.vk.team
  nameserver[0] : 127.0.0.1
  port     : 65114
  flags    : Request A records, Request AAAA records
  reach    : 0x00030002 (Reachable,Local Address,Directly Reachable Address)
System proxy enable flags:
  ProxyAutoConfigEnable : 1
Corporate DNS resolving a public website:

; <<>> DiG 9.10.6 <<>> @172.21.0.1 one.one.one.one A +time=4 +tries=1 +notcp +ignore +noall +comments +answer
; (1 server found)
;; global options: +cmd
;; connection timed out; no servers could be reached
PUBLIC PAGE: normal DNS
curl: (28) Resolving timed out after 8006 milliseconds
ip= http=000 bytes=0 dns=0.000000 tcp=0.000000 tls=0.000000 first_byte=0.000000 total=8.006440
PUBLIC PAGE: address supplied for this request
curl: (7) Failed to connect to one.one.one.one port 443 after 3024 ms: Couldn't connect to server
ip= http=000 bytes=0 dns=0.000012 tcp=0.000000 tls=0.000000 first_byte=0.000000 total=3.024168
Corporate connection afterward:
tcp4       0   1101  192.168.77.2.65098     194.186.63.25.443      ESTABLISHED