AdguardTeam / AdguardTeam/dnsproxy

DNS Proxy as DoH Server with NGINX

Abierto
#188 13 comentarios 0 reacciones 1 asignado Reclamado por @Chinaski1 Ver en GitHub
Priority: P4
Lenguaje dominante
Go
Estrellas
3.3k
Forks
343
Métricas de merge de PR
Sin PR fusionados en 30 d

Descripción

Hi,

I'm trying to configure a DNS Server using the dnsproxy as forwarder for the dns-queries. The configuration i have is the following:

Client : dnsproxy as a DoH client
Server : dnsproxy as a forwarder : the idea is that it takes the DNS query from the HTTP and then replies with the corresponding DNS response by using the desired upstream, for the certificates validation I use NGINX with let's encrypt certs.

I have the following configuration:

Client:
```
verbose: true
output: /home/ivan/client.txt
listen-addrs:
- 127.0.0.3
listen-ports:
- 53
tls-min-version: 1.3
upstream:
- "https://dohauth.iot-roam.net/dns-query"
bootstrap:
- '8.8.8.8:53'
cache-size: 64000
ratelimit: 0
ipv6-disabled: false
udp-buf-size: 0
max-go-routines: 0
version: false
```
Server:
```
---
bootstrap:
- "8.8.8.8:53"
listen-addrs:
- "127.0.0.1"
listen-ports:
- 53
- 8053
max-go-routines: 0
ratelimit: 0
udp-buf-size: 0
upstream:
- "8.8.8.8:53"
https-port:
- 443
verbose: true
output: "/home/ivan/server.txt"
```
Then, if I run tshark I can actually see the DNS query arriving:
```
Running as user "root" and group "root". This could be dangerous.
Capturing on 'Loopback: lo'
1 0.000000000 127.0.0.1 → 127.0.0.1 TCP 74 32902 → 8053 [SYN] Seq=0 Win=65495 Len=0 MSS=65495 SACK_PERM=1 TSval=1702772584 TSecr=0 WS=128
2 0.000015800 127.0.0.1 → 127.0.0.1 TCP 74 8053 → 32902 [SYN, ACK] Seq=0 Ack=1 Win=65483 Len=0 MSS=65495 SACK_PERM=1 TSval=1702772584 TSecr=1702772584 WS=128
3 0.000031916 127.0.0.1 → 127.0.0.1 TCP 66 32902 → 8053 [ACK] Seq=1 Ack=1 Win=65536 Len=0 TSval=1702772584 TSecr=1702772584
4 0.000443476 127.0.0.1 → 127.0.0.1 HTTP 387 GET /dns-query?dns=l0YBIAABAAAAAAABBmdvb2dsZQNjb20AAAEAAQAAKRAAAAAAAAAMAAoACFlUCwOWR0Cg HTTP/1.1
```
But there is no successful DNS resolution

I attached both, the server and client side traces

[client.txt](https://github.com/AdguardTeam/dnsproxy/files/7547762/client.txt)
[server.txt](https://github.com/AdguardTeam/dnsproxy/files/7547826/server.txt)

Maybe I'm misunderstanding something?
Thanks for your help !

Guía de contribución

No hay ninguna guía de contribución indexada para este repositorio

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.