Frank Denis
|
d42ab83184
|
ServerConfig -> StaticConfig to match the config file
|
2018-01-31 08:43:49 +01:00 |
|
Frank Denis
|
cdb8faba75
|
Nits
|
2018-01-31 08:40:20 +01:00 |
|
Frank Denis
|
f6571af24f
|
Nits
|
2018-01-31 08:38:22 +01:00 |
|
Frank Denis
|
5e8925523f
|
Split ConfigLoad a bit more
|
2018-01-31 08:32:44 +01:00 |
|
Frank Denis
|
16fc6b74e9
|
Split ConfigLoad()
|
2018-01-31 08:27:59 +01:00 |
|
Frank Denis
|
bbfcb0c5bd
|
nits
|
2018-01-31 00:37:56 +01:00 |
|
Frank Denis
|
c3414329b3
|
Warn about certificates that are about to expire
|
2018-01-31 00:33:00 +01:00 |
|
Frank Denis
|
86adb438e0
|
Set cert refresh delay default to 240 (4h)
|
2018-01-31 00:21:25 +01:00 |
|
Frank Denis
|
0cc76b8a77
|
Lower the log level for already registered servers
|
2018-01-31 00:19:53 +01:00 |
|
Frank Denis
|
a364e51d9e
|
Increase the cert refresh delay; make D1n0Bot happy
Decrease this for more reliability.
|
2018-01-30 23:53:33 +01:00 |
|
Frank Denis
|
76e5a99a5c
|
Move "refreshing certificates" to debug, display RTT even for 1 server
|
2018-01-30 23:50:42 +01:00 |
|
Frank Denis
|
b741a62aab
|
Start moving things to the wiki
|
2018-01-30 20:23:37 +01:00 |
|
Frank Denis
|
5e1f09a9d1
|
DoH doesn't require a working DNS configuration any more
|
2018-01-30 20:09:04 +01:00 |
|
Frank Denis
|
8f72a82b13
|
Don't forget to prepend prefixes to names in v2 lists
|
2018-01-30 19:47:29 +01:00 |
|
Frank Denis
|
788e97cf86
|
Clarify
|
2018-01-30 19:47:26 +01:00 |
|
Frank Denis
|
a7d75c7923
|
Implement the nofilter filter
|
2018-01-30 19:16:38 +01:00 |
|
Frank Denis
|
3448b5b170
|
Add a -list option to display the list of available resolvers
|
2018-01-30 17:51:47 +01:00 |
|
Frank Denis
|
330d265dc2
|
CRLF
|
2018-01-30 17:43:15 +01:00 |
|
Frank Denis
|
e9b3a0e0b0
|
Space
|
2018-01-30 17:40:38 +01:00 |
|
Frank Denis
|
1d35e249c9
|
Add an option to always ignore the system resolver
This makes startup faster when DoH resolvers without a static IP
are used (Google).
|
2018-01-30 17:37:35 +01:00 |
|
Frank Denis
|
931916097e
|
Remove daemonize, at least from the configuration file example
daemonize only works on Linux so far, and it might not be secure not reliable
|
2018-01-30 16:12:36 +01:00 |
|
Frank Denis
|
ce2a730ab7
|
Remove unneeded port numbers
|
2018-01-30 16:10:46 +01:00 |
|
Frank Denis
|
c39197f7b2
|
Prepare for beta12
|
2018-01-30 15:58:13 +01:00 |
|
Frank Denis
|
61bad01726
|
Import xtransport
|
2018-01-30 15:51:07 +01:00 |
|
Frank Denis
|
ecaf18f614
|
Use a fallback resolver if the local DNS configuration doesn't work
This should fix all chicken-and-egg issues
|
2018-01-30 15:47:39 +01:00 |
|
Frank Denis
|
24c21d5eb2
|
Start moving things to a custom transport
|
2018-01-30 13:29:47 +01:00 |
|
Frank Denis
|
367f7fd675
|
iradix update
|
2018-01-30 11:20:41 +01:00 |
|
Frank Denis
|
c2494cfc40
|
Make file paths relative to the path of the configuration file
|
2018-01-29 23:57:20 +01:00 |
|
Frank Denis
|
b6e5f55870
|
Move the proxy struct to its own file
|
2018-01-29 23:47:04 +01:00 |
|
Frank Denis
|
479d9d14fd
|
Reduce verbosity
|
2018-01-29 04:03:59 +01:00 |
|
Frank Denis
|
cf12fb170a
|
Use a custom transport and a host->ip cache
maybe
Fixes #45
|
2018-01-29 03:58:39 +01:00 |
|
Frank Denis
|
16928b9954
|
Recommend adding the IP addresses of the DoH servers for now
|
2018-01-28 00:30:11 +01:00 |
|
Frank Denis
|
7acc38663b
|
Add Yandex to show that explicit server_names override require_*
|
2018-01-27 19:46:50 +01:00 |
|
Frank Denis
|
7a5484d983
|
Include Google cert hash
|
2018-01-27 19:14:08 +01:00 |
|
Frank Denis
|
f8ec5bb2ed
|
Add mipsle binaries
|
2018-01-27 18:26:07 +01:00 |
|
Frank Denis
|
9eeb68f3a1
|
beta11
|
2018-01-27 18:18:28 +01:00 |
|
Frank Denis
|
a7fe2aacb8
|
Show how to use two servers
|
2018-01-27 18:16:55 +01:00 |
|
Frank Denis
|
aff683a56d
|
HTTP2 -> HTTP/2
|
2018-01-27 18:08:22 +01:00 |
|
Frank Denis
|
333a64e250
|
up
|
2018-01-27 18:07:14 +01:00 |
|
Frank Denis
|
3c2cf2a1dc
|
Validate DoH certificate hashes
|
2018-01-27 17:48:53 +01:00 |
|
Frank Denis
|
5e3e66ac71
|
Of course Google DNS supports DNSSEC
|
2018-01-27 17:05:39 +01:00 |
|
Frank Denis
|
d2f6c69a2c
|
More checks on the response
|
2018-01-27 16:59:45 +01:00 |
|
Frank Denis
|
7dde2f4a37
|
Request DNSSEC signature in the DoH probe
|
2018-01-27 16:53:57 +01:00 |
|
Frank Denis
|
be1e99ea32
|
DoH: send a dummy query before measuring the RTT to ignore the handshake
|
2018-01-27 16:48:22 +01:00 |
|
Frank Denis
|
4f0c29047d
|
+ DoH
|
2018-01-27 15:31:28 +01:00 |
|
Frank Denis
|
50d0c0449f
|
Initial support for DNS-over-HTTP2 -- Yes, it works with Google.
|
2018-01-27 15:26:08 +01:00 |
|
Frank Denis
|
85f8aa1000
|
Fix stamp proto initialization
|
2018-01-26 22:59:16 +01:00 |
|
Frank Denis
|
eca7a078dd
|
Do not blindly execute /sbin/init to detect upstart
|
2018-01-26 22:19:58 +01:00 |
|
Frank Denis
|
e16155e22a
|
DoHstamps
|
2018-01-26 20:38:31 +01:00 |
|
Frank Denis
|
3bbecdcde7
|
up
|
2018-01-26 20:16:45 +01:00 |