Commit Graph

534 Commits

Author SHA1 Message Date
Frank Denis 5e8925523f Split ConfigLoad a bit more 2018-01-31 08:32:44 +01:00
Frank Denis 16fc6b74e9 Split ConfigLoad() 2018-01-31 08:27:59 +01:00
Frank Denis bbfcb0c5bd nits 2018-01-31 00:37:56 +01:00
Frank Denis c3414329b3 Warn about certificates that are about to expire 2018-01-31 00:33:00 +01:00
Frank Denis 86adb438e0 Set cert refresh delay default to 240 (4h) 2018-01-31 00:21:25 +01:00
Frank Denis 0cc76b8a77 Lower the log level for already registered servers 2018-01-31 00:19:53 +01:00
Frank Denis a364e51d9e Increase the cert refresh delay; make D1n0Bot happy
Decrease this for more reliability.
2018-01-30 23:53:33 +01:00
Frank Denis 76e5a99a5c Move "refreshing certificates" to debug, display RTT even for 1 server 2018-01-30 23:50:42 +01:00
Frank Denis b741a62aab Start moving things to the wiki 2018-01-30 20:23:37 +01:00
Frank Denis 5e1f09a9d1 DoH doesn't require a working DNS configuration any more 2018-01-30 20:09:04 +01:00
Frank Denis 8f72a82b13 Don't forget to prepend prefixes to names in v2 lists 2018-01-30 19:47:29 +01:00
Frank Denis 788e97cf86 Clarify 2018-01-30 19:47:26 +01:00
Frank Denis a7d75c7923 Implement the nofilter filter 2018-01-30 19:16:38 +01:00
Frank Denis 3448b5b170 Add a -list option to display the list of available resolvers 2018-01-30 17:51:47 +01:00
Frank Denis 330d265dc2 CRLF 2018-01-30 17:43:15 +01:00
Frank Denis e9b3a0e0b0 Space 2018-01-30 17:40:38 +01:00
Frank Denis 1d35e249c9 Add an option to always ignore the system resolver
This makes startup faster when DoH resolvers without a static IP
are used (Google).
2018-01-30 17:37:35 +01:00
Frank Denis 931916097e Remove daemonize, at least from the configuration file example
daemonize only works on Linux so far, and it might not be secure not reliable
2018-01-30 16:12:36 +01:00
Frank Denis ce2a730ab7 Remove unneeded port numbers 2018-01-30 16:10:46 +01:00
Frank Denis c39197f7b2 Prepare for beta12 2018-01-30 15:58:13 +01:00
Frank Denis 61bad01726 Import xtransport 2018-01-30 15:51:07 +01:00
Frank Denis ecaf18f614 Use a fallback resolver if the local DNS configuration doesn't work
This should fix all chicken-and-egg issues
2018-01-30 15:47:39 +01:00
Frank Denis 24c21d5eb2 Start moving things to a custom transport 2018-01-30 13:29:47 +01:00
Frank Denis 367f7fd675 iradix update 2018-01-30 11:20:41 +01:00
Frank Denis c2494cfc40 Make file paths relative to the path of the configuration file 2018-01-29 23:57:20 +01:00
Frank Denis b6e5f55870 Move the proxy struct to its own file 2018-01-29 23:47:04 +01:00
Frank Denis 479d9d14fd Reduce verbosity 2018-01-29 04:03:59 +01:00
Frank Denis cf12fb170a Use a custom transport and a host->ip cache
maybe
Fixes #45
2018-01-29 03:58:39 +01:00
Frank Denis 16928b9954 Recommend adding the IP addresses of the DoH servers for now 2018-01-28 00:30:11 +01:00
Frank Denis 7acc38663b Add Yandex to show that explicit server_names override require_* 2018-01-27 19:46:50 +01:00
Frank Denis 7a5484d983 Include Google cert hash 2018-01-27 19:14:08 +01:00
Frank Denis f8ec5bb2ed Add mipsle binaries 2018-01-27 18:26:07 +01:00
Frank Denis 9eeb68f3a1 beta11 2018-01-27 18:18:28 +01:00
Frank Denis a7fe2aacb8 Show how to use two servers 2018-01-27 18:16:55 +01:00
Frank Denis aff683a56d HTTP2 -> HTTP/2 2018-01-27 18:08:22 +01:00
Frank Denis 333a64e250 up 2018-01-27 18:07:14 +01:00
Frank Denis 3c2cf2a1dc Validate DoH certificate hashes 2018-01-27 17:48:53 +01:00
Frank Denis 5e3e66ac71 Of course Google DNS supports DNSSEC 2018-01-27 17:05:39 +01:00
Frank Denis d2f6c69a2c More checks on the response 2018-01-27 16:59:45 +01:00
Frank Denis 7dde2f4a37 Request DNSSEC signature in the DoH probe 2018-01-27 16:53:57 +01:00
Frank Denis be1e99ea32 DoH: send a dummy query before measuring the RTT to ignore the handshake 2018-01-27 16:48:22 +01:00
Frank Denis 4f0c29047d + DoH 2018-01-27 15:31:28 +01:00
Frank Denis 50d0c0449f Initial support for DNS-over-HTTP2 -- Yes, it works with Google. 2018-01-27 15:26:08 +01:00
Frank Denis 85f8aa1000 Fix stamp proto initialization 2018-01-26 22:59:16 +01:00
Frank Denis eca7a078dd Do not blindly execute /sbin/init to detect upstart 2018-01-26 22:19:58 +01:00
Frank Denis e16155e22a DoHstamps 2018-01-26 20:38:31 +01:00
Frank Denis 3bbecdcde7 up 2018-01-26 20:16:45 +01:00
Frank Denis 747ccf85cb Let's update Go 2018-01-26 02:25:43 +01:00
Frank Denis 29f1b083a0 Rename a few things to prepare for DoH support 2018-01-26 02:25:38 +01:00
Frank Denis 375378c15b Rename "servers" to "static" for clarity 2018-01-25 17:41:36 +01:00