{
  "port": 8600,
  "protocol": "both",
  "service": "Consul DNS (IANA: asterix)",
  "oneLiner": "Consul's DNS interface for service discovery; IANA registered it to EUROCONTROL's ASTERIX.",
  "whatItIs": "The IANA name for 8600 is asterix, EUROCONTROL's \"Surveillance Data\" format for exchanging radar and other ATM surveillance information, registered in 2005. What you meet on a normal network is Consul: its docs list 8600 as \"The DNS server\", answering queries like <service>.service.consul over both UDP and TCP. It runs on every Consul agent, so it usually appears next to 8500 on the same host. Because it is a DNS responder on a non-standard port, resolvers reach it only via a forwarding rule.",
  "exposure": {
    "verdict": "careful",
    "note": "It answers unauthenticated queries that enumerate your internal services and their addresses. Keep it on a private interface and forward to it from your own resolver rather than publishing it."
  },
  "checkCommand": "dig @TARGET -p 8600 consul.service.consul",
  "links": [
    {
      "title": "Consul — Required ports",
      "url": "https://developer.hashicorp.com/consul/docs/reference/architecture/ports",
      "kind": "official-docs"
    },
    {
      "title": "EUROCONTROL — ASTERIX surveillance data format",
      "url": "https://www.eurocontrol.int/asterix",
      "kind": "official-docs"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    }
  ]
}