cloudflare / cloudflare/cloudflared
cloudflared daemon resolving addresses that are blocked by 1.1.1.3
- Dominant language
- Go
- Stars
- 15.6k
- Forks
- 1.4k
- PR merge metrics
- No merged PRs in 30d
Description
The cloudflared daemon appears to be using 1.1.1.1 even when 1.1.1.3 is specified as the upstream URL. See example below. A website that should be blocked is resolving.
**Info on daemon startup:**
`Environment variables map[config:/etc/cloudflared/config.yml no-autoupdate:true origincert:/etc/cloudflared/cert.pem proxy-dns:true proxy-dns-port:5053 proxy-dns-upstream:https://1.1.1.3/dns-query, https://1.0.0.3/dns-query]`
**dig results with cloudflared daemon:**
```
; <<>> DiG 9.11.5-P4-5.1+deb10u2-Raspbian <<>> @127.0.0.1 -p5053 pornhub.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 58580
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;pornhub.com. IN A
;; ANSWER SECTION:
pornhub.com. 2887 IN A 66.254.114.41
;; Query time: 12 msec
;; SERVER: 127.0.0.1#5053(127.0.0.1)
;; WHEN: Tue Oct 27 09:15:46 CDT 2020
;; MSG SIZE rcvd: 67
```
**dig results using 1.1.1.3 directly:**
```
; <<>> DiG 9.11.5-P4-5.1+deb10u2-Raspbian <<>> @1.1.1.3 pornhub.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6271
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;pornhub.com. IN A
;; ANSWER SECTION:
pornhub.com. 60 IN A 0.0.0.0
;; Query time: 10 msec
;; SERVER: 1.1.1.3#53(1.1.1.3)
;; WHEN: Tue Oct 27 09:16:59 CDT 2020
;; MSG SIZE rcvd: 56
```
Contributor guide
Assessment
This issue has not been assessed yet.