clones/dns-over-https
1
0
Fork 0
mirror of https://github.com/m13253/dns-over-https.git synced 2024-09-21 15:57:11 +00:00
Code Issues Packages Projects Releases Wiki Activity

Added info on ipv6 support. Added simple docker run example in installation section

Browse Source
This commit is contained in:
Satish Gaikwad 2020-04-02 10:42:33 -07:00
parent 8228ea6299
commit 026d89ac8d
1 changed files with 20 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
Readme.md
View File

@ -9,7 +9,7 @@ and [IETF DNS-over-HTTPS (RFC 8484)](https://www.rfc-editor.org/rfc/rfc8484.txt)
[Tutorial to setup your own DNS-over-HTTPS (DoH) server](https://www.aaflalo.me/2018/10/tutorial-setup-dns-over-https-server/). (Thanks to Antoine Aflalo)
## Installing
### From Source
Install [Go](https://golang.org), at least version 1.10.
(Note for Debian/Ubuntu users: You need to set `$GOROOT` if you could not get your new version of Go selected by the Makefile.)
@ -48,7 +48,7 @@ If it is OK, you will see:
;; SERVER: 127.0.0.1#53(127.0.0.1)
### Uninstalling
#### Uninstall
To uninstall, type:
@ -56,6 +56,19 @@ To uninstall, type:
The configuration files are kept at `/etc/dns-over-https`. Remove them manually if you want.
### Using docker image
```
docker run -itd --name doh-server \
-p 8053:8053 \
-e UPSTREAM_DNS_SERVER="udp:8.8.8.8:53" \
-e DOH_HTTP_PREFIX="/dns-query"
-e DOH_SERVER_LISTEN=":8053"
-e DOH_SERVER_TIMEOUT="10"
-e DOH_SERVER_TRIES="3"
-e DOH_SERVER_VERBOSE="false"
satishweb/doh-server
```
## Server Configuration
The following is a typical DNS-over-HTTPS architecture:
@ -165,7 +178,7 @@ upstream_selector = "random"
}
}
### Example configuration: Docker Flow Proxy + Docker
### Example configuration: Docker Flow Proxy + Docker Swarm
```
version: '3.7'
@ -276,13 +289,15 @@ services:
- com.df.distribute=true
- com.df.servicePath='/dns-query'
- com.df.port=8053
```
````
> Above example needs you to add your chained SSL certificate in folder: ./data/proxy/certs and configure upstream DNS server address.
> Complete Docker Stack with DFProxy: https://github.com/satishweb/docker-doh
> Complete Docker Stack with DFProxy + Lets Encrypt SSL: https://github.com/satishweb/docker-doh
> Docker Flow Proxy: https://github.com/docker-flow/docker-flow-proxy
> No IPV6 Support: Docker Swarm does not support IPV6 as of yet. Issue is logged [here](https://github.com/moby/moby/issues/24379)
## DNSSEC
DNS-over-HTTPS is compatible with DNSSEC, and requests DNSSEC signatures by