Commit 6528fbd1 authored by Oli Schacher's avatar Oli Schacher

Update demonotes.md

parent e4425a90
......@@ -2,16 +2,6 @@
## Server overview
test dnsdist: dohrestest.dnsheads.ch
* IPv6 2001:620:5ca1:4015:f816:3eff:fe50:be94
* IPv4 86.119.38.67
* dnsdist : http://dohrestest.dnsheads.ch:8053
* recursor: http://dohrestest.dnsheads.ch:8054
live demo dnsdist: bacon.dnsheads.ch
* IPv6 2001:620:5ca1:4015:f816:3eff:fe0b:8684
......@@ -20,24 +10,7 @@ live demo dnsdist: bacon.dnsheads.ch
* dnsdist : http://bacon.dnsheads.ch:8053
* recursor: http://bacon.dnsheads.ch:8054
## Tooling setup
on servers for local testing:
`yum install -y knot-utils bind-utils`
on local docker vm including sdig:
```
docker run --rm -ti centos:7 /bin/bash
yum install -y epel-release yum-plugin-priorities && \
curl -o /etc/yum.repos.d/powerdns-auth-42.repo \
https://repo.powerdns.com/repo-files/centos-auth-42.repo && \
yum install -y pdns-tools knot-utils bind-utils
```
(pdns-tools includes sdig vor DoH queries, knot-utils includes kdig for DoT queries, bind-utils includes dig for...plain old dns queries)
centos 7 installation
## Resolver setup (pdns-recursor)
......@@ -133,7 +106,6 @@ git clone https://github.com/Neilpang/acme.sh.git
cd acme.sh
CERTHOSTNAME=bacon.dnsheads.ch
CERTHOSTNAME=dohrestest.dnsheads.ch
./acme.sh --issue -d ${CERTHOSTNAME} --dns --yes-I-know-dns-manual-mode-enough-go-ahead-please
......@@ -166,11 +138,6 @@ addDOHLocal('::','/etc/dnsdist/dnsdist.pem', '/etc/dnsdist/dnsdist.key',{'/', '/
addDOHLocal('0.0.0.0','/etc/dnsdist/dnsdist.pem', '/etc/dnsdist/dnsdist.key',{'/', '/dns-query'}, {reusePort=true, tcpFastOpenQueueSize=100, ciphers="EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH:!TLSv1:!TLSv1.1"})
```
Test:
```
sdig https://bacon.dnsheads.ch/ 443 switch.ch ns
sdig https://dohrestest.dnsheads.ch/ 443 switch.ch ns
```
Test using androdns for example.
https://play.google.com/store/apps/details?id=androdns.android.leetdreams.ch.androdns&hl=de_CH
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment