mirror of
https://github.com/minoplhy/DNSserver.git
synced 2024-11-24 02:06:52 +00:00
My Personal Configuration for DNSserver using Haproxy or NGINX
08f2ad8df5
Filters now has a dedicated Repository |
||
---|---|---|
addition | ||
configuration | ||
bright.md | ||
download-filters.sh | ||
README.md |
DOT DOH with haproxy
!!! denylist.rpz and allowlist.rpz are made for my private use and will cause problem with some domain !!!
Query
Dns-over-TLS
---------------------> Haproxy(Frontend) ----------------------------->
Cluster Listen(TCP/443/853)
---------------------> (HTTP/443) -------> m13253/DOH -------> Knot-resolver
Dns-over-HTTPS Listen(Local/http)Listen(Local/dns)
DNSCrypt v2
---------------------> jedisct1/Encrypted DNS Server ------------------->
Listen(TCP/UDP/8443)
Recommendation
- knot-resolver Recommend using upstream repository on debian
- download-filters.sh Recommend if you want to download all the default filters used in kresd.conf(knot-resolver configuration)
- jedisct1/Encrypted-dns-server Recommend if you are looking for an easy way to start a DNSCrypt server
- Mozilla ssl-config Recommend if you are looking for a sample TLS/SSL configuration for your Server Software