afonso/dohproxy
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
An extremely simple DNS-over-HTTPS (DoH) proxy server written in Go
6 commits 1 branch 0 tags 46 KiB
Go 100%
Find a file
afonso 4412ca7097
Change name from doh-proxy to dohproxy
2024-09-01 15:25:30 +01:00
dohproxy.go Change name from doh-proxy to dohproxy 2024-09-01 15:25:30 +01:00
go.mod First commit 2024-08-31 11:36:28 +01:00
go.sum First commit 2024-08-31 11:36:28 +01:00
LICENSE fix license 2024-08-31 12:00:57 +01:00
README.md Change name from doh-proxy to dohproxy 2024-09-01 15:25:30 +01:00

README.md

DNS-over-HTTPS Proxy (dohproxy)

A simple DNS-over-HTTPS (DoH) proxy server written in Go. This tool acts as an intermediary between a DNS client and one or more DNS-over-HTTPS servers, forwarding DNS queries over HTTP/2 and handling responses.

Features

  • Supports both TCP and UDP for DNS queries.
  • Configurable to use multiple upstream DoH servers.
  • Logs all proxied requests (optional).
  • HTTP/2 support for faster and more secure communication.

Getting Started

Prerequisites

  • Go: Make sure you have Go installed on your machine. You can download it from golang.org.

Installation

  1. Clone this repository:

    git clone https://git.olympuslab.net/afonso/dohproxy
cd dohproxy

  2. Build the Go executable:

    go build dohproxy.go

Usage

Run the dohproxy with the following options:

./dohproxy [options]

Options

  • -l: Listen address for the DNS server (default: 127.0.0.1).
  • -p: Port for the DNS server (default: 53).
  • -tcp: Listen on TCP.
  • -udp: Listen on UDP.
  • -log: Enable logging for each request proxied through an upstream.
  • -u: Specify upstream DoH server URLs (can be specified multiple times).

Example

To start the proxy on localhost at port 5353, listening on both TCP and UDP (uses both by default), with two upstream DoH servers and logging enabled:

./dohproxy -l 127.0.0.1 -p 5353 -tcp -udp -log -u https://dns.quad9.net/dns-query -u https://1.1.1.1/dns-query

Important Note

  • You need to run dohproxy as root to use lower ports (such as 53).
  • At least one upstream DoH server URL is required for the proxy to function.
  • If this proxy is used as your system's default DNS resolver and the upstream server URL is a domain name, at least one other DNS server must be specified as an IP address to avoid circular dependency issues.

License

This project is licensed under the MIT License - see the LICENSE file for details.

Acknowledgements