DNS over HTTPS client resolver

Perhaps you are worried about DNS manipulation attacks, or the privacy of your DNS lookups. Eliminating DNS over UDP on your network might be something you want to achieve. This guide shows how to install a DNS resolver on a CentOS 7 system that will forward all your DNS queries to Google via HTTPS. Sounds crazy, but actually the performance was completely reasonable for casual browsing.

This tutorial is based around using the code for the https_dns_proxy project

Install some required packages;
yum install -y git cmake c-ares-devel gcc gcc-c++ libnghttp2-devel pdns-recursor
Fetch the latest libcurl source code (7.56.1 at the time of writing)
wget https://curl.haxx.se/download/curl-7.56.1.tar.gz
Compile libcurl with nghttp2 and ssl support
./configure --with-nghttp2 --with-ssl
make
sudo make install 
Clone the https_dns_proxy code and build it
git clone https://github.com/aarond10/https_dns_proxy.git
cmake .
make
Now configure pdns-recursor, I'm just listening on loopback but if you want to expose this to other clients just adjust as needed.

/etc/pdns-recursor/recursor.conf
setuid=pdns-recursor
setgid=pdns-recursor
allow-from=127.0.0.0/8
export-etc-hosts=on
forward-zones-recurse=.=127.0.0.1:50053
Add the following entry to /etc/hosts
216.58.212.110 dns.google.com
and start pdns-recursor
systemctl start pdns-recursor

Now bring up https_dns_proxy, setting the user and gid to a user of your choice
./https_dns_proxy -u steve -g steve -p 50053 -b 127.0.0.1
You are now running a DNS resolver forwarding all your DNS requests over https to Google!

Now-DNS provides Free Dynamic DNS and URL Shortening services

Comments

Post a Comment

Popular posts from this blog

Creating a Free DDNS Service

Now DNS would not be possible without open source software which we rely heavily on. Our core software stack relies on the following projects; CentOS Apache PHP PostgreSQL PowerDNS BIND NGINX NodeJS Postfix LetsEncrypt We are thankful to al those who contribute to these projects and make them possible! In addition to open source software Now DNS utilises services from the following providers in order to operate OVH Namecheap We recommend all our suppliers as they provide excellent value for money with a high quality of service.
Read more

Howto Setup a Minecraft Server at Home

Image
This simple guide will show you how to run a Minecraft server from home that will allow friends to join your server. It should only take a few minutes to setup by anyone (you don't have to be a network ninja!) Sign up for Free DDNS at Now-DNS and configure an easy to remember hostname from one of our many free domains. The domain crafting.xyz was added especially for Minecraft use, it is available in the drop down list. Install the free Windows DDNS client to keep your hostname up to date with you IP address. Download UPnP wizard and install it. Setup port forwarding using UPnP wizard - Start up UPnP Wizard and add a port mapping for TCP port 25565 by clicking the "+" icon. Download Minecraft Server Start the server - Open a cmd prompt. - Change into the directory that you downloaded the minecraft server into. - Launch the server using java -Xmx1024M -Xms1024M -jar minecraft_server.1.11.jar nogui . - If this is the first time you have launc...
Read more