AdguardTeam / AdguardTeam/AdGuardHome
Support for Registration Data Access Protocol (RDAP) as a replacement for WHOIS
- 主要語言
- TypeScript
- 星號
- 36.9k
- 分支
- 2.5k
- PR 合併指標
- 30 天內沒有已合併 PR
描述
### Problem Description
IETF are working on a new protocol called Registration Data Access Protocol (RDAP) which will eventually be replacing WHOIS. https://www.icann.org/rdap
One of the primary benefit of this protocol for AGH user is that the whole communication is encrypted using HTTPS unlike WHOIS which is a plain text protocol. This prevents any intermediary between user & RIR's WHOIS server to see what IP addresses are being queried. This is particularly useful if you run a semi-public AGH instance and/or have IPv6 enabled and want to avoid unnecessarily leaking user IP's.
RDAP responses are in JSON. An example response can be viewed here https://rdap.arin.net/registry/ip/8.8.8.8
### Proposed Solution
Adguard Home implements support for RDAP which will replace WHOIS or as an option in addition to WHOIS with weighing towards RDAP over WHOIS unless user chooses otherwise.
### Alternatives Considered
Only alternative I could think is to disable WHOIS in AGH to prevent leaking user IP's. This comes at the expense of less enrichment to statistics page.
### Additional Information
Few RDAP Go libraries/client implementations that might of interest to you
* https://github.com/openrdap/rdap / https://pkg.go.dev/github.com/openrdap/rdap
* https://github.com/registrobr/rdap
Playing around with ICANN's web RDAP client (https://lookup.icann.org/en), IANA has a JSON payload detailing which RIR to contact for which range along with endpoint to reach out to.
IPv4: https://data.iana.org/rdap/ipv4.json
IPv6: https://data.iana.org/rdap/ipv6.json
貢獻指南
評估
這個 Issue 還沒有評估資料。