Comments (3)
That is the correct behavior. For the first question, you will need to run the docker image in your home network lets say on a raspberry pi at ip 192.168.1.10 port 53. Then you can configure your router to use this dns server.
For the OpenVPN question, you just need to run the docker image on the server, configure it to be accessible from clients, then make it the default dns server.
The key is that the routing to the docker image should not leave your network since its just plain unencrypted dns queries.
from dns.
Ah thanks that makes a lot more sense. I thought the use case was a cloud hosted dns server.
(I was struggling before to understand in your diagramme why the dns servers request went back through the router to cloudflare - but now viewing it as a local network it makes sense).
Am I correct in thinking that my routers vpn client sends the dns requests encrypted over the vpn tunnel to the hosted vpn server? (currently tested ok for dns leaks - but that's hard to know if the dns requests are just redirected from the vpn server - and potentially still sent in plain text to the vpn server)
If the dns requests are encrypted, then rather than setting up a ras. pi locally (or similar) - I would rather have the dns server hosted with the vpn - as that is a better setup for me.
from dns.
Hi yunti.
Thanks for your interest! And thanks to wei for helping out!
From what I understand, you should have your vpn server use the dns container.
You can also use it on your client side so that your client's ISP can't see to what domain you tunnel to, but that's essentially for paranoids.
I'll update the diagrams to show it as a local area network.
from dns.
Related Issues (20)
- feat(ipv6): auto-detect IPv6 support HOT 1
- feat(filter): block IP addresses from responses of other types of records
- chore(ci): check iana website for DNSSEC root anchor validity
- chore(deps): remove dependency on `github.com/qdm12/golibs` HOT 1
- feature: support listening on a random port `0` HOT 1
- Feature: support serving over DNS over TLS
- Feature: Custom DoH and DoT provider HOT 2
- Resolution problem with some domains HOT 4
- Add support for custom domain forwarders HOT 6
- Running 2.0.0-rc3 with network_mode: host - issues that are persistent in all images HOT 1
- Bloom filter for blocking
- ${subsystem}_responses_sent metic resets during "planned periodic restart of DNS server" HOT 2
- Feature Request: Add a parameter to make unbound forwarding entirely optional?
- feature request: add exported version constant for imports HOT 1
- feature request: environment variable to allow privileged ports when running without root
- All `pkg` constructors should validate settings and return an error HOT 1
- Remove exported interfaces in `pkg` and use only local interfaces HOT 1
- Remove prometheus.Registerer interface usage HOT 1
- Add comments for all exported methods in the `pkg` directory
- Option to log requests/responses in color
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from dns.