From 2cce5efc6299e6550a89f599f4e2b29672adf8eb Mon Sep 17 00:00:00 2001 From: Quack~ <6301735+ookangzheng@users.noreply.github.com> Date: Thu, 7 Apr 2022 06:53:31 +0000 Subject: [PATCH] Update README.md --- README.md | 77 +++---------------------------------------------------- 1 file changed, 3 insertions(+), 74 deletions(-) diff --git a/README.md b/README.md index 905dd34..295cadb 100755 --- a/README.md +++ b/README.md @@ -2,91 +2,20 @@

  
All donations are welcome and any amount of money will help me to maintain this project 🄰 -
If you feel BlahDNS project is helpful pls consider to support this project. -
URGENT !! Need around USD 350 for server renting fees during Februray 2022. !!

## Announcements -* Let's Encrypt DST Root CA X3 has been expired, all Servers SSL CA provider has been switch to ZeroSSL. [more_information](https://community.letsencrypt.org/t/android-devices-with-dot-configured-interaction-with-new-default-chain/161020/13) - * For more old announcements, go [here](https://github.com/ookangzheng/blahdns/issues/36) +* Temporary disable uncensored and CDN DoH, will spin another machine to handle those request ## Our features * Block Trackers, Ads, Malwares, Phishing * No ECS, DNSSEC ready, No logs, OpenNIC, Eth TLD, Yggdrasil -* Here are blocked by default on BlahDNS -`data.mob.com, google-analytics, googleadservices, amazon-adsystem, crashlytics.com, analytics.yahoo, bugsnag, sentry, etc.. ` * Support http://matoken.eth/ | http://mesh.ygg/ | http://i2pd.ygg/ | http://blahdns.oss/ | https://iā¤.ws/ * BlahDNS status [Status Page](https://stats.blahdns.com) | [Dnsprivacy.org](https://dnsprivacy.org/jenkins/job/dnsprivacy-monitoring/) -## DoH CDN (provider: bunny.net) - -``` -https://doh1.blahdns.com/uncensor -https://doh2.blahdns.com/uncensor -https://doh1.blahdns.com/dns-query (censored) -https://doh2.blahdns.com/dns-query (censored) -``` - -## DNS-over-HTTPS example - -`curl` DNS-over-HTTP/2 TCP - -``` -// Censored -curl --doh-url https://doh-jp.blahdns.com/dns-query https://ssl.google-analytics.com -// Return -curl: (7) Failed to connect to ssl.google-analytics.com port 443: Connection refused - -// Uncensor -curl --doh-url https://doh-jp.blahdns.com/uncensor https://ssl.google-analytics.com -// Return - -301 Moved -

301 Moved

-The document has moved -here. - -``` - -`curl` DNS-over-HTTP/3 UDP with QUIC protocol example on Mac OSX - -``` -curl --http3 -H 'accept: application/dns-message' -v 'https://doh-jp.blahdns.com/dns-query?dns=q80BAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB' | hexdump -C - % Total % Received % Xferd Average Speed Time Time Time Current - Dload Upload Total Spent Left Speed - 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0* Trying 139.162.112.47:443... -* Connect socket 5 over QUIC to 139.162.112.47:443 -* Sent QUIC client Initial, ALPN: h3,h3-29,h3-28,h3-27 -* Connected to doh-jp.blahdns.com () port 443 (#0) -* h3 [:method: GET] -* h3 [:path: /dns-query?dns=q80BAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB] -* h3 [:scheme: https] -* h3 [:authority: doh-jp.blahdns.com] -* h3 [user-agent: curl/7.78.0-DEV] -* h3 [accept: application/dns-message] -* Using HTTP/3 Stream ID: 0 (easy handle 0x7f9e6e00c200) -> GET /dns-query?dns=q80BAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB HTTP/3 -> Host: doh-jp.blahdns.com -> user-agent: curl/7.78.0-DEV -> accept: application/dns-message -> -< HTTP/3 200 -< content-type: application/dns-message -< -{ [75 bytes data] -100 75 0 75 0 0 326 0 --:--:-- --:--:-- --:--:-- 331 -* Connection #0 to host doh-jp.blahdns.com left intact -00000000 ab cd 81 a0 00 01 00 01 00 00 00 01 03 77 77 77 |.............www| -00000010 07 65 78 61 6d 70 6c 65 03 63 6f 6d 00 00 01 00 |.example.com....| -00000020 01 03 77 77 77 07 65 78 61 6d 70 6c 65 03 63 6f |..www.example.co| -00000030 6d 00 00 01 00 01 00 00 34 a0 00 04 5d b8 d8 22 |m.......4...].."| -00000040 00 00 29 10 00 00 00 80 00 00 00 |..)........| -0000004b - -``` ## How to setup / config DoH DoT Dnscrypt šŸ‘‡ Config: [HERE for more details](https://github.com/ookangzheng/blahdns/tree/master/server-conf) @@ -97,8 +26,8 @@ Config: [HERE for more details](https://github.com/ookangzheng/blahdns/tree/mast ```bash Server (Switzerland, Germany, Finland, Japan, Singapore) -|-- Knot-resolver (DNS resolver, OpenNIC, ICANN, Yggdrasil, ETH) -|-- Dnsdist (cache, loadbalance) +|-- Knot-resolver (DNS resolver, OpenNIC, ICANN, Yggdrasil, ETH, Cache) +|-- Dnsdist (cache) | | |-- DNSCryptv2 (encrypted-dns-server, port 8443) | | |-- Dnsproxy (DoQ, port 784) | |-- DoH/http3 (port 443/udp)