Re: dnsdist and DoH

Brian Sullivan <[email protected]> Wed, 12 Jun 2019 09:51:00 -0400
Newsgroups gmane.network.dns.powerdns.devel
Message-ID <CAOq51QhiSvMCnxL7gZA7rCAdZeV8rwQwCEgKkXtyEfqeRQTaTA@mail.gmail.com>
Hi Remi,

No worries ... you answered my question quickly! ... thanks for that.

Regards,
brian

On Wed, Jun 12, 2019 at 6:14 AM Remi Gacogne <[email protected]>
wrote:

> Hi!
>
> On 6/12/19 11:58 AM, Pieter Lexis wrote:
> >> hmmm ... maybe it is not compiled in?
> >
> > `dnsdist --version` should show whether or not DoH support is available.
> >
> >>> showDOHFrontends()
> >> DNS over HTTPS support is not present!
> >>
> >>
> >> I followed the ubuntu 16.04 dnsdist to install dnsdist
> >
> > Ubuntu 16.04 does not have libwslay (a dependency of libh2o)
> > and hence no DoH is available there. Please switch to a more modern
> > Ubuntu (like 18.04) to get DoH. Or compile libh2o and any missing
> > dependencies for 16.04 yourself to get DoH working.
> >
> >> Definitely is the correct config file.
> >
> > `addDOHLocal` should log "DNS over HTTPS support is not present!" when
> > starting dnsdist when this support is not present.
>
> Once [1] is merged dnsdist will refuse to start if you ask for DoT or
> DoH and it has not been compiled in. It will also be properly reported
> when run with --check.
> The current behavior was not helpful at all, sorry about that!
>
>
> [1]: https://github.com/PowerDNS/pdns/pull/7915
>
> Best regards,
> --
> Remi Gacogne
> PowerDNS.COM BV - https://www.powerdns.com/
>
> _______________________________________________
> Pdns-dev mailing list
> [email protected]
> https://mailman.powerdns.com/mailman/listinfo/pdns-dev
>


-- 



Brian M. Sullivan
Senior Staff Security Intelligence Engineer
[email protected] |  www.lookout.com

_______________________________________________
Pdns-dev mailing list
[email protected]
https://mailman.powerdns.com/mailman/listinfo/pdns-dev