search

getdnsapi / stubby

Stubby is the name given to a mode of using getdns which enables it to act as a local DNS Privacy stub resolver (using DNS-over-TLS).
https://dnsprivacy.org/dns_privacy_daemon_-_stubby/
BSD 3-Clause "New" or "Revised" License
1.19k stars 99 forks source link

Question: How can I create a client exception in stubby? #355

Open cookiemonsteruk opened 7 months ago

cookiemonsteruk commented 7 months ago

Hello. I've been using stubby for some time and I'm happy wiht it, although the lack of logging options is still in my wish list. The way I use it is with Unbound and AdGuardHome, all on the same device. DHCP gives the ip:53 of the router to clients. The client request to ip:53 gets forwarded by a firewall rule to AdGuardHome daemon listening on 0.0.0.0:53 The upstream DNS servers in AdGuardHome is Unbound:5353 Unbound is configured with a forward zone ".":8053 i.e. stubby. Stubby then does the recursion. I have mutiple DoT configured on stubby in RoundRobin. All is gut.

Now I need to monitor packet loss and other performance of my line to aid diagnose a problem with my ISP. For this I have setup a small internal server running a utility called smokeping. That is configured to regularly measure metrics from itself i.e. an RFC1918 ip to some external DNS servers like 8.8.8.8. My setup above gets in the way and I look for suggestions in stubby to let those queries out of stubby's global configuration. How can I do that, is stubby able to be configured to create these custom configuration per client?

I have of course looked at doing the exceptions on each element in the chain but none have this ability either.

cookiemonsteruk commented 7 months ago

@saradickinson - is stubby now abandoned or set to maintenance mode? Seems no new or changed functionality in 2 years. No problem if it is, good while it lasted (past tense as there are improvements not yet done, i.e. logging to file). I'll look for an alternative if needed.

wtoorop commented 7 months ago

I do have client DoH functionality lying on the shelf for getdns. Just looking for a quite moment to do another maintenance release...

cookiemonsteruk commented 7 months ago

glad to hear that @wtoorop . I use getdns/stubby for DoT but good to hear there is more in the wings.