Skip to content
Configuration files of our DoT and DoH servers
Branch: master
Clone or download
Latest commit 1476dce May 2, 2019
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
nginx add basic config files Apr 10, 2019
README.md
doh-httpproxy.md
unbound.conf add basic config files Apr 10, 2019

README.md

DNS-Resolver

Configuration files of our DoT and DoH servers

Digitale Gesellschaft runs two publicly available DoH and DoT name resolver systems. Our live configuration is publicly available in this repository. Feel free to copy it and run your own DoH or DoT server.

Any suggestions or questions about this configuration? Feel free to contact us!

Overview

Our two servers have an identical setup. Here is a deployment diagram as an overview.

  • Nginx is our reverse proxy which handles connections on port 853/tcp and port 443/tcp. All crypto and certificate configurations are done here.
  • doh-httpproxy is responsible for translating HTTP to DNS and vice versa. We use the one from Facebook experimental team because it is written in python which is already installed with Ubuntu 18.04. Because our servers use a dual core we run two instances of the DoH Proxy in an active-active scenario.
  • Unbound is our DNS resolver, all name to IP translation work is done here.
You can’t perform that action at this time.