Quack~ zoonderkins

Installation

git clone https://github.com/m13253/dns-over-https.git

cd dns-over-https

// make file
make

Mac install stubby

brew install stubby

To have launchd start stubby now and restart at startup:

sudo brew services start stubby

Or, if you don't want/need a background service you can just run:

Latest 2.4.0

https://software.opensuse.org//download.html?project=home%3ACZ-NIC%3Aknot-resolver-latest&package=knot-resolver

Go to this site first

Source: https://software.opensuse.org//download.html?project=home%3ACZ-NIC%3Aknot-resolver-latest&package=knot-resolver

Enable service and autostart

systemctl enable xxx

Disable / remove service from autostart

systemctl disable xxx

Start the service

SSL 设计目标:

防内容篡改
防冒充服务器身份
加密通信内容

而翻墙的目标:

不被检测出客户端在访问什么网站
不被检测出服务器在提供翻墙服务

// get latest apt
deb http://cz.archive.ubuntu.com/ubuntu cosmic main universe

// install related tools
apt install knot-dnsutil ldnsutils

// cd into knot-resolver dir
cd /etc/knot-resolver

Listen to utun1 port 853 (dns over tls)

sudo tcpdump -vv -x -X -i utun1 'port 853'

Listen on port 53 (normal) sudo tcpdump -vv -x -X -i utun1 'port 53'

![Example between naked and over TLS] (https://imgur.com/a/3JP9kn0)

	##################################################################################
	# ELIMINATE SPOTIFY ADS (VERSION 1.2 - 8.5) - UPDATED FREQUENTLY #
	##################################################################################
	#
	# NOTE: SOMETIMES ONLY ANNOUNCEMENT OF AN AD WHILE USING APP VERSION 7.5-7.9?-8.x.
	# USING AN OFFICIAL OLDER VERSION SOLVES THIS. TEST IT (APKMIRROR). THIS WILL NOT
	# OCCUR USING CHROMECAST / GOOGLE HOME.
	#
	# COULD NOT SOLVE THE AUDIO AD INRO/OUTRO IN THE APP.
	# SUGGESTIONS? WRITE A COMMENT BELOW.

	good, 你已经有了一个自己的shadowsocks代理了，现在想要把这个代理公布出去给所有人分享。
	但是没有两个小时，代理就没法使用了，为什么？因为你需要额外注意以下事项（以下步骤需要比较高的linux技能）
	本文只关注于确保shadowsocks服务还“活着”，如果你希望让其跑得更快，请参考
	https://github.com/clowwindy/shadowsocks/wiki/Optimizing-Shadowsocks

	1、 shadowsocks的timeout设置
	超时时间越长，连接被保持得也就越长，导致并发的tcp的连接数也就越多。对于公共代理，这个值应该调整得小一些。推荐60秒。

	2、检查操作系统的各种限制
	对于openvz的vps，特别需要检查一下

	const $$ = (selector, elem = D) =>
	elem.querySelectorAll(selector)

	// More different selector
	const D = document
	const $ = D.querySelector.bind(D)
	const $$ = (selector, startNode = D) => [...startNode.querySelectorAll(selector)]

	// html
	<button id="button">click me!</button>