errantmind / faf-dns-proxy

A DNS-over-TLS (DoT) Proxy, Engineered for Speed
GNU Affero General Public License v3.0
22 stars 1 forks source link

Add system DNS as fallback #1

Open hemeroc opened 6 months ago

hemeroc commented 6 months ago

Is there a way to add the system DNS as fallback?

e.g. I run faf-dns-proxy locally and want it to proxy to 1.1.1.1 if it can't resolve the query at 1.1.1.1 it should go to whatever the system DNS server is.

errantmind commented 6 months ago

I can probably add that. What does your DNS setup look like on your system? How are you going about using faf-dns currently?

hemeroc commented 6 months ago

I am trying to get following setup working:

Chrome Browser --secureDNSoverHTTPS--> DNSCrypt/doh-server --dnsRequest--> errantmind/faf-dns-proxy --> 1.1.1.1 & 8.8.8.8 & systemDNS (set by provider & VPN)

The reason I am trying to get this working is that my provider sets a custom DNS that does some weird DNS blocking. When working I need the company DNS set via VPN or company WiFi. The problem is that Chrome can only override the secure DNS and not allow a fallback to system.

errantmind commented 6 months ago

Alright, I'll try to get to this when I can. It will require a decent amount of refactoring to track this extra state to facilitate a fallback process.

I'll probably add an optional parameter --fallback with an ip:port of the fallback dns, instead of trying to identify what their system DNS is.