AdguardTeam / AdguardTeam/dnsproxy

DNS Proxy as DoH Server with NGINX

Đang mở
#188 13 bình luận 0 reaction 1 người được giao Được @Chinaski1 nhận Xem trên GitHub
Priority: P4
Ngôn ngữ chính
Go
Star
3.3k
Fork
343
Chỉ số merge pull request
Không có pull request nào được merge trong 30 ngày

Mô tả

Hi,

I'm trying to configure a DNS Server using the dnsproxy as forwarder for the dns-queries. The configuration i have is the following:

Client : dnsproxy as a DoH client
Server : dnsproxy as a forwarder : the idea is that it takes the DNS query from the HTTP and then replies with the corresponding DNS response by using the desired upstream, for the certificates validation I use NGINX with let's encrypt certs.

I have the following configuration:

Client:
```
verbose: true
output: /home/ivan/client.txt
listen-addrs:
- 127.0.0.3
listen-ports:
- 53
tls-min-version: 1.3
upstream:
- "https://dohauth.iot-roam.net/dns-query"
bootstrap:
- '8.8.8.8:53'
cache-size: 64000
ratelimit: 0
ipv6-disabled: false
udp-buf-size: 0
max-go-routines: 0
version: false
```
Server:
```
---
bootstrap:
- "8.8.8.8:53"
listen-addrs:
- "127.0.0.1"
listen-ports:
- 53
- 8053
max-go-routines: 0
ratelimit: 0
udp-buf-size: 0
upstream:
- "8.8.8.8:53"
https-port:
- 443
verbose: true
output: "/home/ivan/server.txt"
```
Then, if I run tshark I can actually see the DNS query arriving:
```
Running as user "root" and group "root". This could be dangerous.
Capturing on 'Loopback: lo'
1 0.000000000 127.0.0.1 → 127.0.0.1 TCP 74 32902 → 8053 [SYN] Seq=0 Win=65495 Len=0 MSS=65495 SACK_PERM=1 TSval=1702772584 TSecr=0 WS=128
2 0.000015800 127.0.0.1 → 127.0.0.1 TCP 74 8053 → 32902 [SYN, ACK] Seq=0 Ack=1 Win=65483 Len=0 MSS=65495 SACK_PERM=1 TSval=1702772584 TSecr=1702772584 WS=128
3 0.000031916 127.0.0.1 → 127.0.0.1 TCP 66 32902 → 8053 [ACK] Seq=1 Ack=1 Win=65536 Len=0 TSval=1702772584 TSecr=1702772584
4 0.000443476 127.0.0.1 → 127.0.0.1 HTTP 387 GET /dns-query?dns=l0YBIAABAAAAAAABBmdvb2dsZQNjb20AAAEAAQAAKRAAAAAAAAAMAAoACFlUCwOWR0Cg HTTP/1.1
```
But there is no successful DNS resolution

I attached both, the server and client side traces

[client.txt](https://github.com/AdguardTeam/dnsproxy/files/7547762/client.txt)
[server.txt](https://github.com/AdguardTeam/dnsproxy/files/7547826/server.txt)

Maybe I'm misunderstanding something?
Thanks for your help !

Hướng dẫn đóng góp

Chưa lập chỉ mục được hướng dẫn đóng góp cho kho mã nguồn này

Đánh giá

Issue này chưa được đánh giá.

Nhận issue mới trong hộp thư của bạn

Bản tóm tắt ngắn những issue GitHub phù hợp với người mới.