Home Explore Help
Register Sign In
lottanorta
/
HaproxyDNS
mirror of https://github.com/minoplhy/doh-dot-haproxy
Watch 1
Star 0
Fork 0
Files Wiki

Personal Configuration file for hosting dns server on haproxy

Branch: more_than_just_more
Branches Tags
HaproxyDNS
ZIP TAR.GZ
Minoplhy 95f8c0ce8c Update kresd.conf 3 years ago
addition d612efceec check.http 3 years ago
configuration 95f8c0ce8c Update kresd.conf 3 years ago
filters e3cc35af3e Create lists.txt 3 years ago
README.md f21b598dc3 Update README.md 3 years ago
bright.md d78c9a2b81 Create bright.md 3 years ago

README.md

DOT DOH with haproxy

Mozilla ssl-config

!!! denylist.rpz and allowlist.rpz are made for my private use and will cause problem with some domain !!!

Query
           Dns-over-TLS
          --------------------->  Haproxy(Frontend)    ----------------------------->  Knot-resolver
   Cluster                         Listen(TCP/443/853)                                 Listen(Local/dns)
          --------------------->            (HTTP/443) -------> m13253/DOH   ------->
	   Dns-over-HTTPS                                       Listen(Local/http)

Server structure

    Server(or instances)
    |
    |----> Frontend-DOH (Haproxy 443 http TLS 1.3 strict-sni hdr/host/ ssl)
    |           |----> DOH (m13253/dns-over-https local)
    |                    |---------------------------------------------------------------| 
    |----> Frontend-DOT (Haproxy 443 853 tcp TLS 1.3 strict-sni ssl_fc_sni ssl)          v
                      |--------------------------------------------------------------> Dns Resolver (Knot-resolver dns local)

Recommendation

  1. knot-resolver Recommend using upstream repository on debian