A method implemented by a network traffic management system comprising a network traffic management apparatus, a server device, or a client device, the method comprising: intercepting, by the network traffic management apparatus, a Domain Name System, DNS, request comprising original returnable request values in respective request packet fields; updating, by the network traffic management apparatus, the respective request packet fields of the DNS request by replacing an original returnable request value with a replacement value, the replacement value selected so that a hash function using the values of the updated respective request packet fields as an input generates a first hash value, wherein the returnable request value is a value that is sent in a given request and is returned unchanged in a response to the given request and wherein the respective request packet field containing the original returnable request values comprise a client port, a DNS query identifier, and a DNS query name; forwarding, by the network traffic management apparatus, the updated DNS request to a DNS server; receiving, by the network traffic management apparatus, a DNS response comprising returnable response values in respective response packet fields; using, by the network traffic management apparatus, the returnable response values as inputs to the hash function to generate a second hash value; in response to determining the second hash value matches the first hash value, updating, by the network traffic management apparatus, the respective response packet fields of the DNS response, by replacing the returnable response value of at least one of the respective response packet with the original returnable request value, to generate an updated DNS response; determining, by the network traffic management apparatus, there is an exact match between the original returnable request values and the returnable response values of the updated DNS response before forwarding the updated DNS response to the client; and forwarding, by the network traffic management apparatus, the updated DNS response to a client when there is an exact match between the original returnable request values and the updated response values. intercepting, by the network traffic management apparatus, a Domain Name System, DNS, request comprising original returnable request values in respective request packet fields; updating, by the network traffic management apparatus, the respective request packet fields of the DNS request by replacing an original returnable request value with a replacement value, the replacement value selected so that a hash function using the values of the updated respective request packet fields as an input generates a first hash value, wherein the returnable request value is a value that is sent in a given request and is returned unchanged in a response to the given request and wherein the respective request packet field containing the original returnable request values comprise a client port, a DNS query identifier, and a DNS query name; forwarding, by the network traffic management apparatus, the updated DNS request to a DNS server; receiving, by the network traffic management apparatus, a DNS response comprising returnable response values in respective response packet fields; using, by the network traffic management apparatus, the returnable response values as inputs to the hash function to generate a second hash value; in response to determining the second hash value matches the first hash value, updating, by the network traffic management apparatus, the respective response packet fields of the DNS response, by replacing the returnable response value of at least one of the respective response packet with the original returnable request value, to generate an updated DNS response; determining, by the network traffic management apparatus, there is an exact match between the original returnable request values and the returnable response values of the updated DNS response before forwarding the updated DNS response to the client; and forwarding, by the network traffic management apparatus, the updated DNS response to a client when there is an exact match between the original returnable request values and the updated response values.