readonly/DNSserver
1
0
Fork 0
mirror of https://github.com/minoplhy/DNSserver.git synced 2024-11-24 10:16:54 +00:00
Code Issues Projects Releases Wiki Activity

backend revolution

Browse Source 
- move backend to bottom
- remove garbage line
This commit is contained in:
Minoplhy 2021-02-15 10:44:09 +07:00 committed by GitHub
parent f5d4cb69c1
commit c6fb9270de
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
configuration/haproxy.cfg
View File

@ -56,10 +56,6 @@ frontend 853-in
# DoT
use_backend dns-dot if { ssl_fc_sni dot.domain }
backend dns-dot
mode tcp
server dot 127.0.0.1:5353 check
# TCP LB (443)
frontend 443-in-doh
bind 0.0.0.0:443 strict-sni tfo ssl crt /etc/haproxy/certs/doh.domain.pem alpn h2,http/2
@ -75,12 +71,16 @@ frontend 443-in-doh
use_backend dns-doh if { hdr(host) -i doh.domain }
backend dns-dot
mode tcp
server dot 127.0.0.1:5353 check
backend dns-doh
mode http
server dns-doh 127.0.0.1:8053 check
http-response set-header Strict-Transport-Security max-age=63072000
backend check
mode http
errorfile 503 /root/dns/check.http
http-response set-header Strict-Transport-Security max-age=63072000