readonly/DNSserver
1
0
Fork 0
mirror of https://github.com/minoplhy/DNSserver.git synced 2024-11-24 10:16:54 +00:00
Code Issues Projects Releases Wiki Activity
My Personal Configuration for DNSserver using Haproxy or NGINX
26 Commits 28 Branches 0 Tags 170 KiB
Lua 80.3%
Shell 19.7%
d5ed66e1fc
Go to file
Minoplhy d5ed66e1fc
Merge pull request #4 from minoplhy/policy-lot! 
policy lot!
2021-01-02 21:50:17 +07:00
addition check.http 2021-01-01 19:42:07 +07:00
configuration Update kresd.conf 2021-01-02 21:48:07 +07:00
filters morel! 2021-01-02 21:37:16 +07:00
bright.md Create bright.md 2021-01-01 20:25:06 +07:00
download-filters.sh Rename download.sh to download-filters.sh 2021-01-02 21:41:42 +07:00
README.md **Recommend** 2021-01-02 21:40:57 +07:00

README.md

DOT DOH with haproxy

Mozilla ssl-config

!!! denylist.rpz and allowlist.rpz are made for my private use and will cause problem with some domain !!!

Query
           Dns-over-TLS
          --------------------->  Haproxy(Frontend)    ----------------------------->  Knot-resolver
   Cluster                         Listen(TCP/443/853)                                 Listen(Local/dns)
          --------------------->            (HTTP/443) -------> m13253/DOH   ------->
	   Dns-over-HTTPS                                       Listen(Local/http)

Server structure

    Server(or instances)
    |
    |----> Frontend-DOH (Haproxy 443 http TLS 1.3 strict-sni hdr/host/ ssl)
    |           |----> DOH (m13253/dns-over-https local)
    |                    |---------------------------------------------------------------| 
    |----> Frontend-DOT (Haproxy 443 853 tcp TLS 1.3 strict-sni ssl_fc_sni ssl)          v
                      |--------------------------------------------------------------> Dns Resolver (Knot-resolver dns local)

Recommendation

  1. knot-resolver Recommend using upstream repository on debian
  2. Download.sh Recommend if you want to download all the default filters used in kresd.conf(knot-resolver configuration)