Last active
July 7, 2022 06:51
-
-
Save leiless/5fbdeafb69d56fe737ba639ded9ac124 to your computer and use it in GitHub Desktop.
Sample Corefile for leiless/dnsredir plugin
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# XXX: Deprecated, see below for updates | |
# https://coredns.io/plugins/cache/ | |
(global_cache) { | |
cache { | |
# [5, 60] | |
success 65536 3600 300 | |
# [1, 10] | |
denial 8192 600 60 | |
prefetch 1 60m 10% | |
} | |
} | |
. { | |
debug | |
log . {combined} | |
loop | |
reload 2s | |
errors | |
hosts { | |
fallthrough | |
} | |
import global_cache | |
dnsredir accelerated-domains.china.conf google.china.conf apple.china.conf { | |
expire 15s | |
max_fails 3 | |
health_check 3s | |
policy round_robin | |
path_reload 2s | |
to 114.114.114.114 223.5.5.5 119.29.29.29 | |
} | |
dnsredir . { | |
expire 60s | |
max_fails 5 | |
health_check 5s | |
policy random | |
spray | |
to tls://[email protected] tls://[email protected] | |
to tls://1.1.1.1 tls://1.0.0.1 | |
to tls://[email protected] | |
# Global TLS server name | |
tls_servername one.one.one.one | |
} | |
} | |
简单好用,谢谢
According to 防火墙屏蔽了多个 DoH 服务器, many popular DoH/DoT servers got SNI blocked in mainland China.
Please consider using other(especially minor) DoH servers listed in:
- https://github.com/curl/curl/wiki/DNS-over-HTTPS
- https://kb.adguard.com/en/general/dns-providers
- List of direct IPv4/IPv6 DoH
Or, you can forward all DoH/DoT traffic to your proxy.
SEE ALSO
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
🚀 Encrypt all your DNS queries by using
DNS-over-HTTPS
Updated Jun 19, 2021.
Your DNS queries are encrypted doesn't mean anything to your privacy safety, it only eliminated the possibility of MITM attack.
If privacy safety is a concern, please use privacy-safe DNS servers all the way down.
Note that all China mainland DNS servers are privacy unsafe(due to the regulations), in which case you may setup a private DNS server by your own.
SEE ALSO
https://github.com/curl/curl/wiki/DNS-over-HTTPS
https://github.com/missdeer/coredns_custom_build
https://coredns.minidump.info/
使用Prometheus观察CoreDNS运行状况
https://github.com/xiaodongus/encrypted-dns
DNSPod 的 DoT 和 DoH 对外公测了
https://github.com/curl/curl/wiki/DNS-over-HTTPS
https://gist.github.com/leiless/fe05aefcb08dc066cd7881933f02b9c0