WeLoveDoctor

ODoH(Oblivious DNS over HTTPS)

Written by

byun1114

in

DoH 보다 조금 더 익명성에 신경 쓴 표준. Gemini에서 방법을 물어봤지만 잘 되지 않아서 직접 웹 사이트를 보면서 Gemini 도움 받아가며 구현함.

Oblivious DoH
dnscrypt-proxy 2 – A flexible DNS proxy, with support for encrypted DNS protocols. – DNSCrypt/dnscrypt-proxy

나의 dnscrypt-proxy.toml 설정은 다음과 같다. 구현 에 ODoH 서버와 릴레이 2개의 주소 목록이 필요하다. DoH 만 이용할 때 보다 응답 속도는 많이 느리다. <10 ms 였던 것이 200~400ms 가 된다.

bootstrap_resolvers = ['1.1.1.1:53','8.8.8.8:53','9.9.9.9:53']
listen_addresses = ['0.0.0.0:53']

cache = true
cache_size = 512

odoh_servers = true

[anonymized_dns]
routes = [{ server_name='*', via=['*'] }]

[sources]

  [sources.'odoh-servers']
  urls = [
    'https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/v3/odoh-servers.md',
    'https://download.dnscrypt.info/resolvers-list/v3/odoh-servers.md',
    'https://cdn.jsdelivr.net/gh/DNSCrypt/dnscrypt-resolvers@master/v3/odoh-servers.md'
  ]
  minisign_key = 'RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3'
  cache_file = 'odoh-servers.md'

  [sources.'odoh-relays']
  urls = ['https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/v3/odoh-relays.md', 'https://download.dnscrypt.info/resolvers-list/v3/odoh-relays.md', 'https://cdn.jsdelivr.net/gh/DNSCrypt/dnscrypt-resolvers@master/v3/odoh-relays.md']
  minisign_key = 'RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3'
  cache_file = 'odoh-relays.md'

More posts