Commit graph

1384 commits

Author SHA1 Message Date
Frank Denis
bbfcb0c5bd nits 2018-01-31 00:37:56 +01:00
Frank Denis
c3414329b3 Warn about certificates that are about to expire 2018-01-31 00:33:00 +01:00
Frank Denis
86adb438e0 Set cert refresh delay default to 240 (4h) 2018-01-31 00:21:25 +01:00
Frank Denis
0cc76b8a77 Lower the log level for already registered servers 2018-01-31 00:19:53 +01:00
Frank Denis
a364e51d9e Increase the cert refresh delay; make D1n0Bot happy
Decrease this for more reliability.
2018-01-30 23:53:33 +01:00
Frank Denis
76e5a99a5c Move "refreshing certificates" to debug, display RTT even for 1 server 2018-01-30 23:50:42 +01:00
Frank Denis
8f72a82b13 Don't forget to prepend prefixes to names in v2 lists 2018-01-30 19:47:29 +01:00
Frank Denis
788e97cf86 Clarify 2018-01-30 19:47:26 +01:00
Frank Denis
a7d75c7923 Implement the nofilter filter 2018-01-30 19:16:38 +01:00
Frank Denis
3448b5b170 Add a -list option to display the list of available resolvers 2018-01-30 17:51:47 +01:00
Frank Denis
330d265dc2 CRLF 2018-01-30 17:43:15 +01:00
Frank Denis
e9b3a0e0b0 Space 2018-01-30 17:40:38 +01:00
Frank Denis
1d35e249c9 Add an option to always ignore the system resolver
This makes startup faster when DoH resolvers without a static IP
are used (Google).
2018-01-30 17:37:35 +01:00
Frank Denis
931916097e Remove daemonize, at least from the configuration file example
daemonize only works on Linux so far, and it might not be secure not reliable
2018-01-30 16:12:36 +01:00
Frank Denis
ce2a730ab7 Remove unneeded port numbers 2018-01-30 16:10:46 +01:00
Frank Denis
c39197f7b2 Prepare for beta12 2018-01-30 15:58:13 +01:00
Frank Denis
61bad01726 Import xtransport 2018-01-30 15:51:07 +01:00
Frank Denis
ecaf18f614 Use a fallback resolver if the local DNS configuration doesn't work
This should fix all chicken-and-egg issues
2018-01-30 15:47:39 +01:00
Frank Denis
24c21d5eb2 Start moving things to a custom transport 2018-01-30 13:29:47 +01:00
Frank Denis
c2494cfc40 Make file paths relative to the path of the configuration file 2018-01-29 23:57:20 +01:00
Frank Denis
b6e5f55870 Move the proxy struct to its own file 2018-01-29 23:47:04 +01:00
Frank Denis
479d9d14fd Reduce verbosity 2018-01-29 04:03:59 +01:00
Frank Denis
cf12fb170a Use a custom transport and a host->ip cache
maybe
Fixes #45
2018-01-29 03:58:39 +01:00
Frank Denis
7acc38663b Add Yandex to show that explicit server_names override require_* 2018-01-27 19:46:50 +01:00
Frank Denis
7a5484d983 Include Google cert hash 2018-01-27 19:14:08 +01:00
Frank Denis
9eeb68f3a1 beta11 2018-01-27 18:18:28 +01:00
Frank Denis
a7fe2aacb8 Show how to use two servers 2018-01-27 18:16:55 +01:00
Frank Denis
3c2cf2a1dc Validate DoH certificate hashes 2018-01-27 17:48:53 +01:00
Frank Denis
5e3e66ac71 Of course Google DNS supports DNSSEC 2018-01-27 17:05:39 +01:00
Frank Denis
d2f6c69a2c More checks on the response 2018-01-27 16:59:45 +01:00
Frank Denis
7dde2f4a37 Request DNSSEC signature in the DoH probe 2018-01-27 16:53:57 +01:00
Frank Denis
be1e99ea32 DoH: send a dummy query before measuring the RTT to ignore the handshake 2018-01-27 16:48:22 +01:00
Frank Denis
50d0c0449f Initial support for DNS-over-HTTP2 -- Yes, it works with Google. 2018-01-27 15:26:08 +01:00
Frank Denis
85f8aa1000 Fix stamp proto initialization 2018-01-26 22:59:16 +01:00
Frank Denis
e16155e22a DoHstamps 2018-01-26 20:38:31 +01:00
Frank Denis
3bbecdcde7 up 2018-01-26 20:16:45 +01:00
Frank Denis
29f1b083a0 Rename a few things to prepare for DoH support 2018-01-26 02:25:38 +01:00
Frank Denis
375378c15b Rename "servers" to "static" for clarity 2018-01-25 17:41:36 +01:00
Frank Denis
1164dd4d4d Comment the additional list of servers in the example 2018-01-25 15:59:22 +01:00
Frank Denis
ff5bba1ba4 up 2018-01-25 15:55:27 +01:00
Frank Denis
803bc18027 Use a v2 list 2018-01-25 15:17:46 +01:00
Frank Denis
79193e6ee3 Add support for V2 source format -- Goodbye, CSV. 2018-01-25 15:02:18 +01:00
Frank Denis
78e8abeebc Use http:// 2018-01-25 14:34:55 +01:00
Frank Denis
054461e240 Reserve identifiers for traditional nonencrypted DNS and for DoH 2018-01-25 14:31:18 +01:00
Adrián Laviós Gomis
023c3e78ee Fix systemd socket support 2018-01-25 10:24:28 +01:00
Frank Denis
996d9be4e3 Improve message if /proc/self/exe doesn't exist (?)
Fixes #26
2018-01-24 16:55:28 +01:00
Frank Denis
732c451dd4 Add max_clients to cap the maximum number of client queries 2018-01-24 16:51:26 +01:00
Frank Denis
1dbc765fd7 crlf 2018-01-24 15:23:03 +01:00
Frank Denis
94f9c14ad7 Only attempt to use systemd on linux
Remove plan9 builds
2018-01-24 15:14:48 +01:00
Frank Denis
0b52211fa3 Update dnsc:// leftovers 2018-01-24 14:48:48 +01:00