https://www.paloaltonetworks.com/cyberpedia/what-is-dns-tunn...
See the "Preventing DNS Tunneling" chapter.