4 ms·
Is there any resolver supporting out-of-order pipelined DNS requests over a persistent TCP/TLS connection?
by riobard 9y ago
Is there any resolver supporting out-of-order pipelined DNS requests over a persistent TCP/TLS connection?
- vavrusa 9y agoDPRIVE maintains a list with current implementation status https://dnsprivacy.org/wiki/display/DP/DNS+Privacy+Implementation+Status https://dnsprivacy.org/wiki/display/DP/DNS+Privacy+Implement... (you're looking for TLS encryption + OOOR + pipelining)
- jchw 9y agoNot actually sure but I believe CoreDNS can be used as a resolver and supports a wide array of modern DNS standards.
- aplorbust 9y agoNot sure. However theres various endpoints offering "dns looking glass" service that allow pipelined HTTP/1.1 queries.1 With this "DNS over HTTPS", given a page of HTML containing pointers to various domains, using a simple script one can filter out all the domainnames it contains, format them into HTTP requests, send them to the "dns-lg" endpoint over a single connection, parse the response and append the answers to /etc/hosts or a local authoritative zonefile. Then one can browse the page, including following any remote URLs without having to do any DNS lookups. 1 For example, https://dns.google.com/resolve?name=example.com https://dns.google.com/resolve?name=example.com. http://stat.ripe.net/data/dns-chain/data.json?resource=example.com http://stat.ripe.net/data/dns-chain/data.json?resource=examp... http://dns-lg.sidnlabs.nl/example.com/A?tcp=1 http://dns-lg.sidnlabs.nl/example.com/A?tcp=1
- deleted 9y ago[deleted]
- fanf2 9y agoBIND 9.11 (needs a TLS proxy) and dnsdist (needs a back-end resolver), maybe Knot and PowerDNS but I haven't tested them