Add support for DNS-over-QUIC to systemd-resolved

systemd / systemd

The systemd System and Service Manager

https://systemd.io

GNU General Public License v2.0

13.26k stars 3.79k forks source link

Add support for DNS-over-QUIC to systemd-resolved #23770

Open benoitjpnet opened 2 years ago

benoitjpnet commented 2 years ago

Is your feature request related to a problem? Please describe. DNS-over-QUIC (DoQ) is not supported.

Describe the solution you'd like DoQ implemented.

The long-awaited DNS-over-QUIC protocol has finally graduated from a draft to being a real standard, RFC 9250.

Example of software compatible DoQ:

AdGuardHome, can resolve DoQ and be a DoQ resolver.

The systemd version you checked that didn't have the feature you are asking for

251.2

Somehow related (especially discussions): #8639

daiaji commented 2 years ago

This means that HTTP/3 has also ushered in an official version?

rhymeswithmogul commented 2 years ago

This means that HTTP/3 has also ushered in an official version?

Sure did. RFC 9114 just got released.

codewiz commented 2 years ago

This is the HTTP/3 stack that was used to build DoH3 for Android last year: https://github.com/cloudflare/quiche

It's a solid, actively maintained, portable, secure codebase with a small library footprint (given the complexity of QUIC and H3), and I highly recommend it.

Quiche does not support legacy HTTP/1 and HTTP/2, but since those were TCP-based, there would be no advantage over DoT (in fact, they have higher protocol overhead).

GreyXor commented 2 years ago

However, DoQ is weak when considering the ability to circumvent nationwide Internet censorship. QUIC communication is heavily interfered in countries where the users need encrypted DNS the most.

nikelborm commented 11 months ago

Hi, any updates on this?