Skip to content

Latest commit

 

History

History
140 lines (108 loc) · 3.69 KB

linux.mdx

File metadata and controls

140 lines (108 loc) · 3.69 KB
title description
How to set DNS over HTTPS on Linux
How to set DNS.SB's DoH (DNS over HTTPS) on Linux

import { Callout, Tab, Tabs } from 'nextra-theme-docs' import StepContainer from '../../components/step-container'

How to install DoH client on Linux

We can use dnsproxy from AdguardTeam as DoH Client on Linux system.

DNS Proxy is a simple DNS proxy server that supports all existing DNS protocols including DNS-over-TLS, DNS-over-HTTPS, DNSCrypt, and DNS-over-QUIC. Moreover, it can work as a DNS-over-HTTPS, DNS-over-TLS or DNS-over-QUIC server.

Install DNS Proxy

VERSION=$(curl -s https://api.github.com/repos/AdguardTeam/dnsproxy/releases/latest | grep tag_name | cut -d '"' -f 4) && echo "Latest AdguardTeam dnsproxy version is $VERSION"
wget -O dnsproxy.tar.gz "https://github.com/AdguardTeam/dnsproxy/releases/download/${VERSION}/dnsproxy-linux-amd64-${VERSION}.tar.gz"
tar -xzvf dnsproxy.tar.gz
cd linux-amd64
sudo mv dnsproxy /usr/bin/dnsproxy

Connect DNS.SB DoH Server

sudo dnsproxy -l 127.0.0.1 -p 53 -u https://doh.dns.sb/dns-query -b 185.222.222.222:53

Now we can open another terminal to test DNS

root@dns ~ # dig example.com @127.0.0.1
; <<>> DiG 9.16.15-Debian <<>> example.com @127.0.0.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 22295
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;example.com.			IN	A
;; ANSWER SECTION:
example.com.		1094	IN	A	93.184.216.34
;; Query time: 3 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Fri Jul 02 13:07:43 UTC 2021
;; MSG SIZE  rcvd: 56

We can see the response server SERVER: 127.0.0.1#53(127.0.0.1) is working fine.

Keep DNS Proxy running in background

We can use Supervisor or systemd to keep DNS Proxy running in background.

For Supervisor, we can install it first:

<Tabs items={['Debian / Ubuntu', 'CentOS / Fedora', 'Arch Linux / Manjaro']}> 

sudo apt install supervisor -y
```bash sudo yum install epel-release -y sudo yum update sudo yum install supervisor -y ``` ```bash sudo pacman -S supervisor ```

Then create a config file named /etc/supervisor/conf.d/dnsproxy.conf

[program:dnsproxy]
command = /usr/bin/dnsproxy -l 127.0.0.1 -p 53 -u https://doh.dns.sb/dns-query -b 185.222.222.222:53
user = root
autostart = true
autorestart = true
stdout_logfile = /var/log/supervisor/dnsproxy.log
stderr_logfile = /var/log/supervisor/dnsproxy.error.log
environment = LANG="en_US.UTF-8"

Now let's restart Supervisor

sudo systemctl restart supervisor

For systemd, we can create a service file named /etc/systemd/system/dnsproxy.service

[Unit]
Description=DNS Proxy
After=network.target
Requires=network.target

[Service]
Type=simple
ExecStart=/usr/bin/dnsproxy -l 127.0.0.1 -p 53 -u https://doh.dns.sb/dns-query -b 185.222.222.222:53
Restart=on-failure

[Install]
WantedBy=multi-user.target

Now let's enable and start the service

sudo systemctl daemon-reload
sudo systemctl enable --now dnsproxy

Edit /etc/resolv.conf

We can use the same method like How to change DNS settings on Linux, open /etc/resolv.conf

sudo vim /etc/resolv.conf

Replace the nameserver lines with

nameserver 127.0.0.1

Save the file and it's working now.