search

m13253 / dns-over-https

High performance DNS over HTTPS client & server
https://developers.google.com/speed/public-dns/docs/dns-over-https
MIT License
1.96k stars 221 forks source link

[Feature Request]Disable logging #142

Open mcmufffin opened 1 year ago

mcmufffin commented 1 year ago

Dear Team,

we have an issue that due to failing upstream responses (it seems like clients requests records that servfail on porpuse) explode the logfiles. Logging is already set do verbose=disabled but it would be nice to disable it altogether.

Thanks!

m13253 commented 1 year ago

Thanks for reporting!

My memory could be wrong but I remember, if the upstream returns a ServFail, doh-server will not log anything, but simply forward the ServFail to the client. Therefore, if you see ServFail in logs, the most likely reason is that doh-server have trouble connecting to the upstream. I could be wrong, feel free to correct me if so.

Disabling verbose only disables anything “succeeds”. It will always leave anything “fails” in the log.

If you want to disable all logging, the easiest way is just >/dev/null 2>&1. This is the most reliable way to ensure zero-logging policy, at the price of more difficult troubleshooting.