readonly/DNSserver
1
0
Fork 0
mirror of https://github.com/minoplhy/DNSserver.git synced 2024-11-24 02:06:52 +00:00
Code Issues Projects Releases Wiki Activity
My Personal Configuration for DNSserver using Haproxy or NGINX
132 Commits 28 Branches 0 Tags 170 KiB
Lua 80.3%
Shell 19.7%
4d2eaa8ff2
Go to file
Minoplhy 4d2eaa8ff2
Codeberg isn't active
2022-01-17 17:29:23 +00:00
addition Update check.http 2021-01-23 14:19:27 +07:00
configuration fix compatiblity issues on some Android 11 phone 2022-01-17 15:43:09 +00:00
bright.md Create bright.md 2021-01-01 20:25:06 +07:00
download-filters.sh Update download-filters.sh 2021-08-28 15:02:05 +07:00
README.md Codeberg isn't active 2022-01-17 17:29:23 +00:00

README.md

HaproxyDNS

Use Haproxy or NGINX as Dns-over-HTTPS | DNS-over-TLS | DNSCrypt(not Haproxy) | Plain DNS Server

!!! denylist.rpz and allowlist.rpz are made for my private use and will cause problem with some domain !!!

denylist.rpz and allowlist.rpz now moved to dedicated repository but still cause problem

Query
           Dns-over-TLS
          --------------------->  Haproxy(Frontend)    ----------------------------->  
Cluster                         Listen(TCP/443/853)                                 
          --------------------->            (HTTP/443) -------> m13253/DOH   ------->        Knot-resolver
	   Dns-over-HTTPS                                                                    Listen(global/dns)Listen(Local/dns)
	   DNSCrypt v2             
	   --------------------->  jedisct1/Encrypted DNS Server ------------------->
                                   Listen(TCP/UDP/8443)

or NGINX

Query
           Dns-over-TLS
          --------------------->  NGINX(Frontend)    ----------------------------->  
Cluster                         Listen(TCP/853)                                 
          --------------------->            (HTTP/443) -------> m13253/DOH   ------->        Knot-resolver
	   Dns-over-HTTPS                                                                    Listen(global/dns)Listen(Local/dns)
	   DNSCrypt v2             
	   --------------------->  jedisct1/Encrypted DNS Server ------------------->
                                   Listen(TCP/UDP/8443)

Recommendation

  1. knot-resolver Recommended using upstream repository on debian
  2. download-filters.sh Recommended if you want to download all the default filters used in kresd.conf(knot-resolver configuration)
  3. jedisct1/Encrypted-dns-server Recommended if you are looking for an easy way to start a DNSCrypt server
  4. Mozilla ssl-config Recommended if you are looking for a sample TLS/SSL configuration for your Server Software
  5. AdGuardHome or Pi-hole Recommended in case your blocklist are big {my big is around 10MB ++} and RAM is your limitation .
  6. use AdGuardHome or Pi-hole instead of Knot-Resolver Recommended if you already forwarded all requests to Third-Party(e.g. quad9)
  7. not open Port 53 to the world Recommended if your dns server is only for private use or internal use, cause you'll get chance of getting flood from unknown party

Mirror / Fork

Mirror n Fork Repository might not up-to-date with main repository

notabug.org

git.disroot.org