mirror of
https://github.com/m13253/dns-over-https.git
synced 2026-03-31 11:55:38 +00:00
Compare commits
8 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
83f20767ea | ||
|
|
07db7ba200 | ||
|
|
cdb8599c9f | ||
|
|
236f7931e6 | ||
|
|
196207631b | ||
|
|
9562c2fe5c | ||
|
|
0a107be362 | ||
|
|
efa272bc52 |
@@ -34,7 +34,7 @@ import (
|
|||||||
"sync"
|
"sync"
|
||||||
"time"
|
"time"
|
||||||
|
|
||||||
"../json-dns"
|
"github.com/m13253/dns-over-https/json-dns"
|
||||||
"github.com/miekg/dns"
|
"github.com/miekg/dns"
|
||||||
"golang.org/x/net/http2"
|
"golang.org/x/net/http2"
|
||||||
)
|
)
|
||||||
@@ -182,21 +182,21 @@ func (c *Client) handlerFunc(w dns.ResponseWriter, r *dns.Msg, isTCP bool) {
|
|||||||
if len(c.conf.UpstreamIETF) == 0 {
|
if len(c.conf.UpstreamIETF) == 0 {
|
||||||
requestType = "application/dns-json"
|
requestType = "application/dns-json"
|
||||||
} else if len(c.conf.UpstreamGoogle) == 0 {
|
} else if len(c.conf.UpstreamGoogle) == 0 {
|
||||||
requestType = "application/dns-udpwireformat"
|
requestType = "application/dns-message"
|
||||||
} else {
|
} else {
|
||||||
numServers := len(c.conf.UpstreamGoogle) + len(c.conf.UpstreamIETF)
|
numServers := len(c.conf.UpstreamGoogle) + len(c.conf.UpstreamIETF)
|
||||||
random := rand.Intn(numServers)
|
random := rand.Intn(numServers)
|
||||||
if random < len(c.conf.UpstreamGoogle) {
|
if random < len(c.conf.UpstreamGoogle) {
|
||||||
requestType = "application/dns-json"
|
requestType = "application/dns-json"
|
||||||
} else {
|
} else {
|
||||||
requestType = "application/dns-udpwireformat"
|
requestType = "application/dns-message"
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
var req *DNSRequest
|
var req *DNSRequest
|
||||||
if requestType == "application/dns-json" {
|
if requestType == "application/dns-json" {
|
||||||
req = c.generateRequestGoogle(w, r, isTCP)
|
req = c.generateRequestGoogle(w, r, isTCP)
|
||||||
} else if requestType == "application/dns-udpwireformat" {
|
} else if requestType == "application/dns-message" {
|
||||||
req = c.generateRequestIETF(w, r, isTCP)
|
req = c.generateRequestIETF(w, r, isTCP)
|
||||||
} else {
|
} else {
|
||||||
panic("Unknown request Content-Type")
|
panic("Unknown request Content-Type")
|
||||||
@@ -210,19 +210,21 @@ func (c *Client) handlerFunc(w dns.ResponseWriter, r *dns.Msg, isTCP bool) {
|
|||||||
candidateType := strings.SplitN(req.response.Header.Get("Content-Type"), ";", 2)[0]
|
candidateType := strings.SplitN(req.response.Header.Get("Content-Type"), ";", 2)[0]
|
||||||
if candidateType == "application/json" {
|
if candidateType == "application/json" {
|
||||||
contentType = "application/json"
|
contentType = "application/json"
|
||||||
|
} else if candidateType == "application/dns-message" {
|
||||||
|
contentType = "application/dns-message"
|
||||||
} else if candidateType == "application/dns-udpwireformat" {
|
} else if candidateType == "application/dns-udpwireformat" {
|
||||||
contentType = "application/dns-udpwireformat"
|
contentType = "application/dns-message"
|
||||||
} else {
|
} else {
|
||||||
if requestType == "application/dns-json" {
|
if requestType == "application/dns-json" {
|
||||||
contentType = "application/json"
|
contentType = "application/json"
|
||||||
} else if requestType == "application/dns-udpwireformat" {
|
} else if requestType == "application/dns-message" {
|
||||||
contentType = "application/dns-udpwireformat"
|
contentType = "application/dns-message"
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
if contentType == "application/json" {
|
if contentType == "application/json" {
|
||||||
c.parseResponseGoogle(w, r, isTCP, req)
|
c.parseResponseGoogle(w, r, isTCP, req)
|
||||||
} else if contentType == "application/dns-udpwireformat" {
|
} else if contentType == "application/dns-message" {
|
||||||
c.parseResponseIETF(w, r, isTCP, req)
|
c.parseResponseIETF(w, r, isTCP, req)
|
||||||
} else {
|
} else {
|
||||||
panic("Unknown response Content-Type")
|
panic("Unknown response Content-Type")
|
||||||
|
|||||||
@@ -10,6 +10,8 @@ upstream_google = [
|
|||||||
|
|
||||||
# CloudFlare's resolver, bad ECS, good DNSSEC
|
# CloudFlare's resolver, bad ECS, good DNSSEC
|
||||||
#"https://cloudflare-dns.com/dns-query",
|
#"https://cloudflare-dns.com/dns-query",
|
||||||
|
#"https://1.1.1.1/dns-query",
|
||||||
|
#"https://1.0.0.1/dns-query",
|
||||||
|
|
||||||
]
|
]
|
||||||
upstream_ietf = [
|
upstream_ietf = [
|
||||||
@@ -19,12 +21,16 @@ upstream_ietf = [
|
|||||||
|
|
||||||
# CloudFlare's resolver, bad ECS, good DNSSEC
|
# CloudFlare's resolver, bad ECS, good DNSSEC
|
||||||
#"https://cloudflare-dns.com/dns-query",
|
#"https://cloudflare-dns.com/dns-query",
|
||||||
|
#"https://1.1.1.1/dns-query",
|
||||||
|
#"https://1.0.0.1/dns-query",
|
||||||
|
|
||||||
]
|
]
|
||||||
|
|
||||||
# Bootstrap DNS server to resolve the address of the upstream resolver
|
# Bootstrap DNS server to resolve the address of the upstream resolver
|
||||||
# If multiple servers are specified, a random one will be chosen each time.
|
# If multiple servers are specified, a random one will be chosen each time.
|
||||||
# If empty, use the system DNS settings.
|
# If empty, use the system DNS settings.
|
||||||
|
# If you want to preload IP addresses in /etc/hosts instead of using a
|
||||||
|
# bootstrap server, please make this list empty.
|
||||||
bootstrap = [
|
bootstrap = [
|
||||||
|
|
||||||
# Google's resolver, bad ECS, good DNSSEC
|
# Google's resolver, bad ECS, good DNSSEC
|
||||||
|
|||||||
@@ -35,7 +35,7 @@ import (
|
|||||||
"strings"
|
"strings"
|
||||||
"time"
|
"time"
|
||||||
|
|
||||||
"../json-dns"
|
"github.com/m13253/dns-over-https/json-dns"
|
||||||
"github.com/miekg/dns"
|
"github.com/miekg/dns"
|
||||||
)
|
)
|
||||||
|
|
||||||
@@ -91,7 +91,7 @@ func (c *Client) generateRequestGoogle(w dns.ResponseWriter, r *dns.Msg, isTCP b
|
|||||||
err: err,
|
err: err,
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
req.Header.Set("Accept", "application/json, application/dns-udpwireformat")
|
req.Header.Set("Accept", "application/json, application/dns-message, application/dns-udpwireformat")
|
||||||
req.Header.Set("User-Agent", "DNS-over-HTTPS/1.1 (+https://github.com/m13253/dns-over-https)")
|
req.Header.Set("User-Agent", "DNS-over-HTTPS/1.1 (+https://github.com/m13253/dns-over-https)")
|
||||||
c.httpClientMux.RLock()
|
c.httpClientMux.RLock()
|
||||||
resp, err := c.httpClient.Do(req)
|
resp, err := c.httpClient.Do(req)
|
||||||
|
|||||||
@@ -36,7 +36,7 @@ import (
|
|||||||
"strings"
|
"strings"
|
||||||
"time"
|
"time"
|
||||||
|
|
||||||
"../json-dns"
|
"github.com/m13253/dns-over-https/json-dns"
|
||||||
"github.com/miekg/dns"
|
"github.com/miekg/dns"
|
||||||
)
|
)
|
||||||
|
|
||||||
@@ -128,6 +128,7 @@ func (c *Client) generateRequestIETF(w dns.ResponseWriter, r *dns.Msg, isTCP boo
|
|||||||
numServers := len(c.conf.UpstreamIETF)
|
numServers := len(c.conf.UpstreamIETF)
|
||||||
upstream := c.conf.UpstreamIETF[rand.Intn(numServers)]
|
upstream := c.conf.UpstreamIETF[rand.Intn(numServers)]
|
||||||
requestURL := fmt.Sprintf("%s?ct=application/dns-udpwireformat&dns=%s", upstream, requestBase64)
|
requestURL := fmt.Sprintf("%s?ct=application/dns-udpwireformat&dns=%s", upstream, requestBase64)
|
||||||
|
//requestURL := fmt.Sprintf("%s?ct=application/dns-message&dns=%s", upstream, requestBase64)
|
||||||
|
|
||||||
var req *http.Request
|
var req *http.Request
|
||||||
if len(requestURL) < 2048 {
|
if len(requestURL) < 2048 {
|
||||||
@@ -150,9 +151,9 @@ func (c *Client) generateRequestIETF(w dns.ResponseWriter, r *dns.Msg, isTCP boo
|
|||||||
err: err,
|
err: err,
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
req.Header.Set("Content-Type", "application/dns-udpwireformat")
|
req.Header.Set("Content-Type", "application/dns-message")
|
||||||
}
|
}
|
||||||
req.Header.Set("Accept", "application/dns-udpwireformat, application/json")
|
req.Header.Set("Accept", "application/dns-message, application/dns-udpwireformat, application/json")
|
||||||
req.Header.Set("User-Agent", "DNS-over-HTTPS/1.1 (+https://github.com/m13253/dns-over-https)")
|
req.Header.Set("User-Agent", "DNS-over-HTTPS/1.1 (+https://github.com/m13253/dns-over-https)")
|
||||||
c.httpClientMux.RLock()
|
c.httpClientMux.RLock()
|
||||||
resp, err := c.httpClient.Do(req)
|
resp, err := c.httpClient.Do(req)
|
||||||
@@ -184,7 +185,7 @@ func (c *Client) parseResponseIETF(w dns.ResponseWriter, r *dns.Msg, isTCP bool,
|
|||||||
log.Printf("HTTP error: %s\n", req.response.Status)
|
log.Printf("HTTP error: %s\n", req.response.Status)
|
||||||
req.reply.Rcode = dns.RcodeServerFailure
|
req.reply.Rcode = dns.RcodeServerFailure
|
||||||
contentType := req.response.Header.Get("Content-Type")
|
contentType := req.response.Header.Get("Content-Type")
|
||||||
if contentType != "application/dns-udpwireformat" && !strings.HasPrefix(contentType, "application/dns-udpwireformat;") {
|
if contentType != "application/dns-message" && !strings.HasPrefix(contentType, "application/dns-message;") {
|
||||||
w.WriteMsg(req.reply)
|
w.WriteMsg(req.reply)
|
||||||
return
|
return
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -33,7 +33,7 @@ import (
|
|||||||
"strings"
|
"strings"
|
||||||
"time"
|
"time"
|
||||||
|
|
||||||
"../json-dns"
|
"github.com/m13253/dns-over-https/json-dns"
|
||||||
"github.com/miekg/dns"
|
"github.com/miekg/dns"
|
||||||
"golang.org/x/net/idna"
|
"golang.org/x/net/idna"
|
||||||
)
|
)
|
||||||
|
|||||||
@@ -32,7 +32,7 @@ import (
|
|||||||
"strconv"
|
"strconv"
|
||||||
"time"
|
"time"
|
||||||
|
|
||||||
"../json-dns"
|
"github.com/m13253/dns-over-https/json-dns"
|
||||||
"github.com/miekg/dns"
|
"github.com/miekg/dns"
|
||||||
)
|
)
|
||||||
|
|
||||||
@@ -45,7 +45,7 @@ func (s *Server) parseRequestIETF(w http.ResponseWriter, r *http.Request) *DNSRe
|
|||||||
errtext: fmt.Sprintf("Invalid argument value: \"dns\" = %q", requestBase64),
|
errtext: fmt.Sprintf("Invalid argument value: \"dns\" = %q", requestBase64),
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
if len(requestBinary) == 0 && r.Header.Get("Content-Type") == "application/dns-udpwireformat" {
|
if len(requestBinary) == 0 && (r.Header.Get("Content-Type") == "application/dns-message" || r.Header.Get("Content-Type") == "application/dns-udpwireformat") {
|
||||||
requestBinary, err = ioutil.ReadAll(r.Body)
|
requestBinary, err = ioutil.ReadAll(r.Body)
|
||||||
if err != nil {
|
if err != nil {
|
||||||
return &DNSRequest{
|
return &DNSRequest{
|
||||||
@@ -144,7 +144,7 @@ func (s *Server) generateResponseIETF(w http.ResponseWriter, r *http.Request, re
|
|||||||
return
|
return
|
||||||
}
|
}
|
||||||
|
|
||||||
w.Header().Set("Content-Type", "application/dns-udpwireformat")
|
w.Header().Set("Content-Type", "application/dns-message")
|
||||||
now := time.Now().UTC().Format(http.TimeFormat)
|
now := time.Now().UTC().Format(http.TimeFormat)
|
||||||
w.Header().Set("Date", now)
|
w.Header().Set("Date", now)
|
||||||
w.Header().Set("Last-Modified", now)
|
w.Header().Set("Last-Modified", now)
|
||||||
|
|||||||
@@ -33,8 +33,8 @@ import (
|
|||||||
"strings"
|
"strings"
|
||||||
"time"
|
"time"
|
||||||
|
|
||||||
"../json-dns"
|
|
||||||
"github.com/gorilla/handlers"
|
"github.com/gorilla/handlers"
|
||||||
|
"github.com/m13253/dns-over-https/json-dns"
|
||||||
"github.com/miekg/dns"
|
"github.com/miekg/dns"
|
||||||
)
|
)
|
||||||
|
|
||||||
@@ -98,17 +98,20 @@ func (s *Server) handlerFunc(w http.ResponseWriter, r *http.Request) {
|
|||||||
if r.FormValue("name") != "" {
|
if r.FormValue("name") != "" {
|
||||||
contentType = "application/dns-json"
|
contentType = "application/dns-json"
|
||||||
} else if r.FormValue("dns") != "" {
|
} else if r.FormValue("dns") != "" {
|
||||||
contentType = "application/dns-udpwireformat"
|
contentType = "application/dns-message"
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
var responseType string
|
var responseType string
|
||||||
for _, responseCandidate := range strings.Split(r.Header.Get("Accept"), ",") {
|
for _, responseCandidate := range strings.Split(r.Header.Get("Accept"), ",") {
|
||||||
responseCandidate = strings.ToLower(strings.SplitN(responseCandidate, ";", 2)[0])
|
responseCandidate = strings.SplitN(responseCandidate, ";", 2)[0]
|
||||||
if responseCandidate == "application/json" {
|
if responseCandidate == "application/json" {
|
||||||
responseType = "application/json"
|
responseType = "application/json"
|
||||||
break
|
break
|
||||||
} else if responseCandidate == "application/dns-udpwireformat" {
|
} else if responseCandidate == "application/dns-udpwireformat" {
|
||||||
responseType = "application/dns-udpwireformat"
|
responseType = "application/dns-message"
|
||||||
|
break
|
||||||
|
} else if responseCandidate == "application/dns-message" {
|
||||||
|
responseType = "application/dns-message"
|
||||||
break
|
break
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
@@ -116,14 +119,18 @@ func (s *Server) handlerFunc(w http.ResponseWriter, r *http.Request) {
|
|||||||
// Guess response Content-Type based on request Content-Type
|
// Guess response Content-Type based on request Content-Type
|
||||||
if contentType == "application/dns-json" {
|
if contentType == "application/dns-json" {
|
||||||
responseType = "application/json"
|
responseType = "application/json"
|
||||||
|
} else if contentType == "application/dns-message" {
|
||||||
|
responseType = "application/dns-message"
|
||||||
} else if contentType == "application/dns-udpwireformat" {
|
} else if contentType == "application/dns-udpwireformat" {
|
||||||
responseType = "application/dns-udpwireformat"
|
responseType = "application/dns-message"
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
var req *DNSRequest
|
var req *DNSRequest
|
||||||
if contentType == "application/dns-json" {
|
if contentType == "application/dns-json" {
|
||||||
req = s.parseRequestGoogle(w, r)
|
req = s.parseRequestGoogle(w, r)
|
||||||
|
} else if contentType == "application/dns-message" {
|
||||||
|
req = s.parseRequestIETF(w, r)
|
||||||
} else if contentType == "application/dns-udpwireformat" {
|
} else if contentType == "application/dns-udpwireformat" {
|
||||||
req = s.parseRequestIETF(w, r)
|
req = s.parseRequestIETF(w, r)
|
||||||
} else {
|
} else {
|
||||||
@@ -144,7 +151,7 @@ func (s *Server) handlerFunc(w http.ResponseWriter, r *http.Request) {
|
|||||||
|
|
||||||
if responseType == "application/json" {
|
if responseType == "application/json" {
|
||||||
s.generateResponseGoogle(w, r, req)
|
s.generateResponseGoogle(w, r, req)
|
||||||
} else if responseType == "application/dns-udpwireformat" {
|
} else if responseType == "application/dns-message" {
|
||||||
s.generateResponseIETF(w, r, req)
|
s.generateResponseIETF(w, r, req)
|
||||||
} else {
|
} else {
|
||||||
panic("Unknown response Content-Type")
|
panic("Unknown response Content-Type")
|
||||||
|
|||||||
51
linux-install.md
Normal file
51
linux-install.md
Normal file
@@ -0,0 +1,51 @@
|
|||||||
|
# Ubuntu Install
|
||||||
|
> Tested on a clean install of `Ubuntu 16.04 LTS`
|
||||||
|
|
||||||
|
## Intalling go
|
||||||
|
Install `Go >= 1.9`
|
||||||
|
|
||||||
|
```bash
|
||||||
|
sudo apt update
|
||||||
|
sudo apt install golang-1.10 -y
|
||||||
|
```
|
||||||
|
|
||||||
|
Add the newly install `go` to the path
|
||||||
|
|
||||||
|
```bash
|
||||||
|
export PATH=$PATH:/usr/lib/go-1.10/bin
|
||||||
|
```
|
||||||
|
|
||||||
|
Test to make sure that you can execute `go`
|
||||||
|
|
||||||
|
```bash
|
||||||
|
go version
|
||||||
|
```
|
||||||
|
which should output something like
|
||||||
|
|
||||||
|
```bash
|
||||||
|
go version go1.10.1 linux/amd64
|
||||||
|
```
|
||||||
|
|
||||||
|
## Installing dns-over-https
|
||||||
|
|
||||||
|
Clone this repo
|
||||||
|
|
||||||
|
|
||||||
|
```bash
|
||||||
|
git clone https://github.com/m13253/dns-over-https.git
|
||||||
|
```
|
||||||
|
|
||||||
|
Change directory to the cloned repo
|
||||||
|
|
||||||
|
```bash
|
||||||
|
cd dns-over-https
|
||||||
|
```
|
||||||
|
|
||||||
|
make and install
|
||||||
|
|
||||||
|
```bash
|
||||||
|
make
|
||||||
|
sudo make install
|
||||||
|
```
|
||||||
|
|
||||||
|
|
||||||
13
linux-install.sh
Executable file
13
linux-install.sh
Executable file
@@ -0,0 +1,13 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
# See the linux-install.md (README) first.
|
||||||
|
set -e
|
||||||
|
|
||||||
|
sudo apt update
|
||||||
|
sudo apt install golang-1.10 git -y
|
||||||
|
export PATH=$PATH:/usr/lib/go-1.10/bin
|
||||||
|
cd /tmp
|
||||||
|
git clone https://github.com/m13253/dns-over-https.git
|
||||||
|
cd dns-over-https
|
||||||
|
make
|
||||||
|
sudo make install
|
||||||
Reference in New Issue
Block a user