Skip to content
GitLab
Menu
Projects
Groups
Snippets
Loading...
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in
Toggle navigation
Menu
Open sidebar
Oli Schacher
dnsheads-doh
Commits
6528fbd1
Commit
6528fbd1
authored
Nov 22, 2019
by
Oli Schacher
Browse files
Update demonotes.md
parent
e4425a90
Changes
1
Hide whitespace changes
Inline
Side-by-side
demonotes.md
View file @
6528fbd1
...
...
@@ -2,16 +2,6 @@
## Server overview
test dnsdist: dohrestest.dnsheads.ch
*
IPv6 2001:620:5ca1:4015:f816:3eff:fe50:be94
*
IPv4 86.119.38.67
*
dnsdist : http://dohrestest.dnsheads.ch:8053
*
recursor: http://dohrestest.dnsheads.ch:8054
live demo dnsdist: bacon.dnsheads.ch
*
IPv6 2001:620:5ca1:4015:f816:3eff:fe0b:8684
...
...
@@ -20,24 +10,7 @@ live demo dnsdist: bacon.dnsheads.ch
*
dnsdist : http://bacon.dnsheads.ch:8053
*
recursor: http://bacon.dnsheads.ch:8054
## Tooling setup
on servers for local testing:
`yum install -y knot-utils bind-utils`
on local docker vm including sdig:
```
docker run --rm -ti centos:7 /bin/bash
yum install -y epel-release yum-plugin-priorities && \
curl -o /etc/yum.repos.d/powerdns-auth-42.repo \
https://repo.powerdns.com/repo-files/centos-auth-42.repo && \
yum install -y pdns-tools knot-utils bind-utils
```
(pdns-tools includes sdig vor DoH queries, knot-utils includes kdig for DoT queries, bind-utils includes dig for...plain old dns queries)
centos 7 installation
## Resolver setup (pdns-recursor)
...
...
@@ -133,7 +106,6 @@ git clone https://github.com/Neilpang/acme.sh.git
cd acme.sh
CERTHOSTNAME=bacon.dnsheads.ch
CERTHOSTNAME=dohrestest.dnsheads.ch
./acme.sh --issue -d ${CERTHOSTNAME} --dns --yes-I-know-dns-manual-mode-enough-go-ahead-please
...
...
@@ -166,11 +138,6 @@ addDOHLocal('::','/etc/dnsdist/dnsdist.pem', '/etc/dnsdist/dnsdist.key',{'/', '/
addDOHLocal('0.0.0.0','/etc/dnsdist/dnsdist.pem', '/etc/dnsdist/dnsdist.key',{'/', '/dns-query'}, {reusePort=true, tcpFastOpenQueueSize=100, ciphers="EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH:!TLSv1:!TLSv1.1"})
```
Test:
```
sdig https://bacon.dnsheads.ch/ 443 switch.ch ns
sdig https://dohrestest.dnsheads.ch/ 443 switch.ch ns
```
Test using androdns for example.
https://play.google.com/store/apps/details?id=androdns.android.leetdreams.ch.androdns&hl=de_CH
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment