mikispag / dns-over-tls-forwarder

A simple, fast DNS-over-TLS forwarding server with hybrid LRU/MFA caching written in Go.
MIT License
46 stars 9 forks source link

EDNS/EDE support #61

Open Anuskuss opened 4 months ago

Anuskuss commented 4 months ago

Cloudflare:

$ dig @1.1.1.1 sigfail.ippacket.stream
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; EDE: 6 (DNSSEC Bogus): (failed to verify sigfail.rsa2048-sha256.ippacket.stream. A: using DNSKEY ids = [46436])
;; QUESTION SECTION:
;sigfail.ippacket.stream.   IN  A

dns-over-tls-forwarder:

$ ./dns-over-tls-forwarder -a :5053 &
$ dig @127.0.0.1 -p 5053 sigfail.ippacket.stream
;; QUESTION SECTION:
;sigfail.ippacket.stream.   IN  A
mikispag commented 1 week ago

PRs welcome 😄 .