Closed deshmukhrajvardhan closed 2 years ago
In doh-client.conf
, change
url = "https://127.0.0.1:8443"
to
url = "https://127.0.0.1:8443/dns-query"
Thanks @m13253 ! this was one of the main config problems. Additionally, i had to change the dns-resolver: Dnscrypt-Proxy config
# Empty listen_addresses to use systemd socket activation
listen_addresses = ['127.0.2.1:9001']
ask the doh-server to talk with it
upstream = [
"udp:127.0.2.1:9001",
"tcp:127.0.2.1:9001",
]
I have it up and working Let me know if this project/repository could benefit from the example i have. If that's the case, i can document it (have scripts that can trigger it) so that others can use it? Also, i have this setup in a container. Could supply that code as well.
Thanks again!
Yes, Dnscrypt-Proxy is compatible with my software, partially.
There were in the past, and could be in the future, some issues while connecting Dnscrypt-Proxy with doh-client/doh-server though. I tried to reach their developers to fix some issues in the past, but got turned down. So don't expect the compatibility to be perfect.
Since I can't guarantee the compatibility with Dnscrypt-Proxy, neither am I willing to promote Dnscrypt-Proxy in my software, I am not going to officially document “How to connect doh-client/doh-server to Dnscrypt-Proxy”.
Thanks @m13253 for the background and explanation. It makes sense. Do you recommend any other DNS proxy resolver that could be used with the DoH server? Just for future reference, for people that would like to have the full setup (application<->doh-client<->nginx-proxy<->doh-server<->dns-resolver)
I am marking this issue as resolved as it solved my problem. Thanks again!
Hi,
I am trying to create an Example for typical DNS-over-HTTPS architecture with following topology. nslookup or curl application<->doh-client<->nginx-proxy<->doh-server<->dns-resolver
Help needed
case 1
after using this command
nslookup https://dns.example.com/dns-query 127.0.0.1
doh-client sendsGET /?ct=application/dns-message&dns=AAABAAABAAAAAAABD2h0dHBzOi8vZXhhbXBsZQ1jb20vZG5zLXF1ZXJ5AAABAAEAACkQAAAAAAAAAA
to nginx proxy and the nginx proxy has only one pathlocation /dns-query
. Therefore, nginx returns404 Not Found
.case 2
after using this command
SSLKEYLOGFILE=/etc/doh-standalone/shared/curl_key.log curl -k https://127.0.0.1:8443/dns-query
the application talks to the nginx proxy directlyGET /dns-query
proxy talks to the doh-server that reply'sWould appreciate help in configuration Let me know if you need more information.
Highlights of the configurations:
doh-client.conf
insecure_tls_skip_verify = true
listen = [ "127.0.0.1:8053", "[::1]:8053",
] path = "/dns-query" upstream = [ "udp:127.0.2.1:53", ]