Outgoing DNS over HTTPS.. not available.

[bcookatpcsd]

Using chrisss404/powerdns:1.7.0-dnsdist

Caught exception: Outgoing DNS over HTTPS support requested (via 'dohPath' on newServer()) but nghttp2 support is not available

Using this config..

addLocal('127.0.0.1:53',{doTCP=true, reusePort=true})
addACL('127.0.0.0/8')

pc = newPacketCache(4096)      
getPool(""):setCache(pc)
setServerPolicy(leastOutstanding)

newServer({address="9.9.9.9:853", tls="openssl", subjectName="dns.quad9.net", validateCertificates=true, name="dot-quad9"})

newServer({address="9.9.9.9:443", tls="openssl", subjectName="dns.quad9.net", validateCertificates=true, dohPath="/dns-query", name="doh-quad9"})

version: '3.7'
services:

  dnsdist:
    container_name: dnsdist-chriss404
    restart: unless-stopped
    volumes:
      - '/etc/dnsdist:/etc/dnsdist'
    network_mode: host
    logging:
      driver: "json-file"
      options:
        max-size: "5m"
        max-file: "5"
        compress: "true"
    ulimits:
      nofile:
        soft: 65535
        hard: 65535
    image: 'chrisss404/powerdns:1.7.0-dnsdist'
    tty: true
    stdin_open: true

[chrisss404]

Thanks for reporting. Enabled nghttp2.

[bcookatpcsd]

Great, thank you..

Should the 3 hour ago docker hub image have this?

DIGEST:sha256:d53582dd70aca87afa452f0609e9df0294fdc3ad795f6e495a2b1a65da45ec58

 docker-compose -f /root/compose/dnsdist-chriss404.yml up
[+] Running 1/1
 ⠿ Container dnsdist-chriss404  Recreated                                                                                                                                                                                                        0.1s
Attaching to dnsdist-chriss404
dnsdist-chriss404  | Added downstream server 9.9.9.9:853
dnsdist-chriss404  | Listening on 127.0.0.1:53
dnsdist-chriss404  | dnsdist 2022-03-07 comes with ABSOLUTELY NO WARRANTY. This is free software, and you are welcome to redistribute it according to the terms of the GPL version 2
dnsdist-chriss404  | ACL allowing queries from: 10.0.0.0/8, 100.64.0.0/10, 127.0.0.0/8, 169.254.0.0/16, 172.16.0.0/12, 192.168.0.0/16, ::1/128, fc00::/7, fe80::/10
dnsdist-chriss404  | Console ACL allowing connections from: 127.0.0.0/8, ::1/128
dnsdist-chriss404  | Marking downstream dot-quad9 (9.9.9.9:853) as 'up'
dnsdist-chriss404  | Error while retrieving the security update for version dnsdist-2022-03-07: Unable to get a valid Security Status update
dnsdist-chriss404  | Not validating response for security status update, this is a non-release version.

if I enable the Quad9 doh..

I get the error it seems..

dnsdist-chriss404 exited with code 1
dnsdist-chriss404  | Added downstream server 9.9.9.9:853
dnsdist-chriss404  | Fatal Lua error: [string "chunk"]:11: Caught exception: Outgoing DNS over HTTPS support requested (via 'dohPath' on newServer()) but nghttp2 support is not available
dnsdist-chriss404  | stack traceback:
dnsdist-chriss404  |    [C]: in function 'newServer'
dnsdist-chriss404  |    [string "chunk"]:11: in main chunk
^CGracefully stopping... (press Ctrl+C again to force)

Thank you sir..

[chrisss404]

Should the 3 hour ago docker hub image have this?

No, but the next update should have. This can take a few more hours.

[bcookatpcsd]

Attaching to dnsdist-chriss404
dnsdist-chriss404  | Added downstream server 9.9.9.9:853
dnsdist-chriss404  | Added downstream server 9.9.9.9:443
dnsdist-chriss404  | Listening on 127.0.0.1:53
dnsdist-chriss404  | dnsdist 2022-03-07 comes with ABSOLUTELY NO WARRANTY. This is free software, and you are welcome to redistribute it according to the terms of the GPL version 2
dnsdist-chriss404  | ACL allowing queries from: 10.0.0.0/8, 100.64.0.0/10, 127.0.0.0/8, 169.254.0.0/16, 172.16.0.0/12, 192.168.0.0/16, ::1/128, fc00::/7, fe80::/10
dnsdist-chriss404  | Console ACL allowing connections from: 127.0.0.0/8, ::1/128
dnsdist-chriss404  | Marking downstream dot-quad9 (9.9.9.9:853) as 'up'
dnsdist-chriss404  | Marking downstream doh-quad9 (9.9.9.9:443) as 'up'
dnsdist-chriss404  | Error while retrieving the security update for version dnsdist-2022-03-07: Unable to get a valid Security Status update
dnsdist-chriss404  | Not validating response for security status update, this is a non-release version.

Thank you sir.

Greatly appreciated.