Use a TLS certificate that does not have IPs as SAN.
Make sure HTTPS port is set to 443.
Stop AGH.
Do the following changes to AdGuardHome.yaml:
Set http.address to 127.0.0.1:80
Set dns.bind_hosts to other IP addresses the host might have, for instance:
dns:
bind_hosts:
- 192.0.2.1
- 2001:db8::1
Start AGH.
Connect to one of the bind hosts using HTTPS.
Expected result
AGH should be responding with the DoH listener.
Actual result
AGH not responding as its not listening on the dns.bind_hosts addresses for DoH.
Additional information and/or screenshots
System Information:
root@agh-demohost:~# uname -a
Linux agh-demohost 6.1.0-26-arm64 #1 SMP Debian 6.1.112-1 (2024-09-30) aarch64 GNU/Linux
root@agh-demohost:~# lsb_release -a
No LSB modules are available.
Distributor ID: Debian
Description: Debian GNU/Linux 12 (bookworm)
Release: 12
Codename: bookworm
root@agh-demohost:~#
The host contains 3 public IP addresses for each IP version, so 3 IPv4 and 3 IPv6 addresses totaling to 6 addresses. All addresses have seperate purposes and is delegated to the same interface.
Prerequisites
[X] I have checked the Wiki and Discussions and found no answer
[X] I have searched other issues and found no duplicates
[X] I want to report a bug and not ask a question or ask for help
[X] I have set up AdGuard Home correctly and configured clients to use it. (Use the Discussions for help with installing and configuring clients.)
Platform (OS and CPU architecture)
Linux, ARM64
Installation
GitHub releases or script from README
Setup
On one machine
AdGuard Home version
v0.108.0-b.59
Action
AdGuardHome.yaml
:http.address
to127.0.0.1:80
dns.bind_hosts
to other IP addresses the host might have, for instance:Expected result
AGH should be responding with the DoH listener.
Actual result
AGH not responding as its not listening on the
dns.bind_hosts
addresses for DoH.Additional information and/or screenshots
System Information:
The host contains 3 public IP addresses for each IP version, so 3 IPv4 and 3 IPv6 addresses totaling to 6 addresses. All addresses have seperate purposes and is delegated to the same interface.
Related (redacted)
interfaces(5)
config:For reference, one IP pair is for the server itself, one pair is for
pdns-recursor
anddnsproxy
, and last pair is for AGH.Only in AGH I couldn't get dual stack working (without setting a global listener like
0.0.0.0
or[::]
, which led me discovering this bug.