mirror of
https://github.com/ookangzheng/blahdns.git
synced 2025-12-16 22:25:37 +07:00
105 lines
2.8 KiB
Markdown
Executable File
105 lines
2.8 KiB
Markdown
Executable File
## Android DoT / DoH config
|
|
|
|
Go [HERE](https://github.com/ookangzheng/blahdns/blob/master/client-conf/DoT-or-DoH-Android.md)
|
|
|
|
## Dnscrypt-proxy
|
|
|
|
Go [HERE](https://github.com/ookangzheng/blahdns/tree/master/client-conf/dnscrypt)
|
|
|
|
## Knot-resolver
|
|
|
|
```bash
|
|
-- Load useful modules
|
|
modules = {
|
|
'policy',
|
|
'hints > iterate', -- Load /etc/hosts and allow custom root hints
|
|
-- 'stats', -- Track internal statistics
|
|
-- 'predict', -- Prefetch expiring/frequent records
|
|
}
|
|
net.listen({'::1', '127.0.0.1'}, 53)
|
|
-- Cache size
|
|
cache.size = 100 * MB
|
|
|
|
-- Forward queries to Blahdns
|
|
policy.add(policy.all(policy.TLS_FORWARD({{'139.162.112.47@853', hostname='dot-jp.blahdns.com', ca_file='/etc/ssl/certs/ca-certificates.crt'}})))
|
|
|
|
```
|
|
|
|
## Unbound
|
|
|
|
```bash
|
|
# /etc/unbound/unbound.conf
|
|
|
|
include: "/etc/unbound/unbound.conf.d/*.conf"
|
|
verbosity: 1
|
|
tls-cert-bundle: "/etc/ssl/certs/ca-certificates.crt"
|
|
interface: 127.0.0.1@53
|
|
interface: 0::1@53
|
|
harden-dnssec-stripped: no # disable DNSSEC
|
|
do-not-query-localhost: no
|
|
|
|
forward-zone:
|
|
name: "."
|
|
forward-tls-upstream: yes
|
|
forward-addr: 95.216.212.177@443#dot-fi.blahdns.com
|
|
forward-addr: 2a01:4f9:c010:43ce::1@853#dot-fi.blahdns.com
|
|
forward-addr: 139.162.112.47@853#dot-jp.blahdns.com
|
|
forward-addr: 2001:19f0:7001:3259:5400:02ff:fe71:0bc9@443#dot-jp.blahdns.com
|
|
forward-addr: 78.46.244.143@853#dot-de.blahdns.com
|
|
forward-addr: 2a01:4f8:c17:ec67::1@853#dot-de.blahdns.com
|
|
forward-addr: 45.91.92.121@853#dot-ch.blahdns.com
|
|
forward-addr: 2a0e:dc0:6:23::2@853#dot-ch.blahdns.com
|
|
forward-addr: 192.53.175.149@853#dot-sg.blahdns.com
|
|
forward-addr: 2400:8901::f03c:92ff:fe27:870a@853#dot-sg.blahdns.com
|
|
|
|
```
|
|
|
|
## Stubby
|
|
|
|
Go [HERE](https://github.com/ookangzheng/blahdns/tree/master/client-conf/stubby)
|
|
|
|
|
|
## Windows
|
|
Simplednscrypt -> https://simplednscrypt.org/ and install
|
|
|
|

|
|

|
|
|
|
## Kdig
|
|
```bash
|
|
kdig google.com @dot-jp.blahdns.com +tls
|
|
```
|
|
## getdns
|
|
```bash
|
|
sudo apt install getdns-utils
|
|
getdns_query @139.162.112.47 -s -L -A www.google.com
|
|
```
|
|
|
|
## Curl
|
|
```bash
|
|
curl -H 'accept: application/dns-json' 'https://doh-jp.blahdns.com/dns-query?name=www.google.com&type=A'
|
|
```
|
|
|
|
## Facebook python doh-proxy
|
|
```bash
|
|
sudo apt install python3-pip python3-setuptools python3-wheel
|
|
sudo -H pip3 install doh-proxy
|
|
doh-client --domain doh-jp.blahdns.com --qname google.com --qtype A
|
|
```
|
|
|
|
## Linux-systemd
|
|
```bash
|
|
nano /etc/systemd/resolved.conf
|
|
|
|
DNS=4139.162.112.47
|
|
DNSOverTLS=opportunistic
|
|
|
|
// Save and restart service
|
|
sudo systemctl restart systemd-resolved
|
|
// Check settings
|
|
resolvectl status
|
|
resolvectl query dot-jp.blahdns.com -t A
|
|
```
|
|
|
|
|