My Personal Configuration for DNSserver using Haproxy or NGINX
Go to file
2021-01-15 20:01:41 +07:00
addition check.http 2021-01-01 19:42:07 +07:00
configuration Rename client-conf/dnscrypt-proxy.toml to configuration/client/dnscrypt-proxy.toml 2021-01-11 20:17:04 +07:00
filters KeePass are blocked back again 2021-01-11 20:00:52 +07:00
bright.md Create bright.md 2021-01-01 20:25:06 +07:00
download-filters.sh Update download-filters.sh 2021-01-06 20:38:35 +07:00
README.md Update README.md 2021-01-15 20:00:43 +07:00

DOT DOH with haproxy

!!! denylist.rpz and allowlist.rpz are made for my private use and will cause problem with some domain !!!

Query
           Dns-over-TLS
          --------------------->  Haproxy(Frontend)    ----------------------------->  
Cluster                         Listen(TCP/443/853)                                 
          --------------------->            (HTTP/443) -------> m13253/DOH   ------->        Knot-resolver
	   Dns-over-HTTPS                                                                    Listen(Local/http)Listen(Local/dns)
	   DNSCrypt v2             
	   --------------------->  jedisct1/Encrypted DNS Server ------------------->
                                   Listen(TCP/UDP/8443)

Recommendation

  1. knot-resolver Recommend using upstream repository on debian
  2. Download.sh Recommend if you want to download all the default filters used in kresd.conf(knot-resolver configuration)
  3. jedisct1/Encrypted-dns-server is recommended if you are looking for an easy way to start a DNSCrypt server
  4. Mozilla ssl-config is recommended if you are looking for a sample TLS/SSL configuration for your Server Software

Mirror / Fork

notabug.org

codeberg.org