Resolve all domains in the DNS chain

AdguardTeam / dnsproxy

Simple DNS proxy with DoH, DoT, DoQ and DNSCrypt support

Apache License 2.0

2.37k stars 245 forks source link

Resolve all domains in the DNS chain #242

Open agneevX opened 2 years ago

agneevX commented 2 years ago

Hello.

An option should be added to dnsproxy that resolves all CNAMEs in a DNS chain, instead of just returning what the upstream server has sent.

While this will add a considerable amount of latency, it is prudent to ensure that the cache is not poisoned and is a very important feature that other recursors such as Unbound and BIND have implemented inherently.

ameshkov commented 2 years ago

Tbh, I am skeptical about this one. This is recursor's job to resolve the whole chain.