doh-cf-workers
dnslookup
Our great sponsors
doh-cf-workers | dnslookup | |
---|---|---|
31 | 28 | |
351 | 730 | |
- | - | |
5.3 | 5.5 | |
2 months ago | 3 months ago | |
JavaScript | Go | |
BSD Zero Clause License | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
doh-cf-workers
-
Cloudflare DNS stopped working totally!
For desktop browser, just change the Secure DNS/DNS over HTTPS settings to one of the servers in https://github.com/curl/curl/wiki/DNS-over-HTTPS, if they're all blocked, create your own with https://github.com/tina-hello/doh-cf-workers. On Android use Intra to load custom DoH, and on iOS use https://dns.notjakob.com/ to create the DoH profile.
-
Public DNS resolver is blocked, way to bypass?
If Cloudflare Workers aren't blocked, you can use https://github.com/tina-hello/doh-cf-workers to forward to it, though it only work with DNS over HTTPS client (most desktop browsers, Windows 11, iOS, macOS, Intra on Android and YogaDNS on older Windows)
-
Ditching Normal DNS for Enhanced Safety: Zero Trust with DNS over HTTPS/TLS
DoH is another game entirely, even if you import the known DoH domains manually, anyone including dedicated kids, can create their own DoH proxy in minutes.
-
Encrypted DNS, what's the point?
Even those who weren't interested in self-hosting might spend a couple of minutes hosting their own DNS proxy since it's much more flexible and don't require root or dedicated port (at least with DoH).
-
Stop devices from using other DNS to bypass AdGuardHome?
While you can in turn block those DoH servers (and probably block port 853 too to stop the default DoT & DoQ traffic), there are ridiculous amount of public DoH servers available, partly because of how easy it is to self-host AGH and expose the DoH endpoint to the public. Anyone can even create their own in minutes.
-
Can't change DNS settings, can ISP block it?
Check if your router support DNS over TLS (DoT) or DNS over HTTPS (DoH), that would ignore the ISP filtering, assuming the ISP doesn't just block port 853 for DoT, or filtering well-known DoH server, in which case just setup your own.
-
Android phones can't connect if I block port 853 on router to stop others bypassing NextDNS
If you don't want to set up AGH at home or at a VPS, accept that the phones need to use the NextDNS/Nebulo/Intra/AdGuard app set to your NextDNS DoH endpoint while you block other providers, though this doesn't actually stop others from using their own/generic NextDNS, or even any provider if their DoH client support bootstrapping. Also, unless it's a seriously fancy router that analyzes traffic statistics, blocking DoH is merely using public list of DoH domains, anyone can create their DoH proxy which won't be blocked. Some routers have SNI filtering which can block websites regardless of the DNS used, but then you need to provide your own blocklist.
-
Subliminal Through Tor?
That's probably SNI filtering, but try other servers from https://adguard-dns.io/kb/general/dns-providers/ and https://github.com/curl/curl/wiki/DNS-over-HTTPS/ just in case, or make your own proxy on https://github.com/tina-hello/doh-cf-workers
-
Zero Trust:Block other DNS over HTTPS/TLS
If you want to go that route, keep in mind the entire Cloudflare Workers and Cloudflare Pages subdomains (workers.dev and pages.dev) can be used as free DoH proxy. Sure you can put the nuclear option, but it would break sites that do use them.
-
Filtering bypass.. I surrender? FEATURE REQUEST INSIDE
A purely DNS-based solution is bound to be easily bypassed, it's really simple to bootstrap the IP so there's no need to even use the network/OS DNS to resolve the custom DoH domain, with hundreds of publicly known DoH and trivial deployment of DoH forwarder you're fighting a losing game.
dnslookup
-
Public DNS resolver is blocked, way to bypass?
I test that IP with https://github.com/ameshkov/dnslookup and it doesn't respond to Do53, DoH nor DoT.
-
Custom DNS over HTTPS (DoH) not working in Firefox 114
In both FF 113 and FF 114, the proper DoH address works fine, including https://1.1.1.1/dns-query, also try with the servers at https://github.com/curl/curl/wiki/DNS-over-HTTPS, you can verify them through https://github.com/ameshkov/dnslookup
-
remote connection to private dns
On Windows just extract https://github.com/ameshkov/dnslookup/releases/download/v1.9.1/dnslookup-windows-amd64-v1.9.1.zip and run the terminal from that folder.
-
Adguard Home - trying to setup encryption
So does Chrome says you have a valid cert, or not? That error message comes from AGH, not from Chrome. If Chrome says your cert is valid, then there's no issue. Verify that the DoT (if you use them, if not you can just rely on Cloudflare cert) works with https://github.com/ameshkov/dnslookup
-
Is it safe to open DNS server to internet over DoH/DoT?
I'm using Technitium, and it requires converting cert to pkcs12, and I think something is wrong here — dnslookup keeps telling me that "tls: failed to verify certificate: x509: certificate signed by unknown authority".
-
Can't reach mangadex
What is your AGH upstream address, and how did you set up Quad9 & Cloudflare? Using dnslookup, compare the result of querying mangadex domain against your AGH instance and Quad9.
- AdGuard DNS been lacking lately?
-
Does Adguard DNS on iPhone work internationally? Or specific to some regions?
Do you have a pc/laptop at hand? Try checking with https://github.com/ameshkov/dnslookup if the DoH/DoT addresses of AdGuard work correctly (ie, filter doubleclick.net etc)
-
[Question] Blocking time
If you directly lookup using https://github.com/ameshkov/dnslookup, does the delay still happens? If not, could be browser/OS caching.
-
Is anyone else having issues with OpenDNS providing bad responses/redirecting traffic?
I used https://github.com/ameshkov/dnslookup and the endpoints in https://adguard-dns.io/kb/general/dns-providers/#cisco-opendns, all of them resolve my domain correctly. Could be region specific though.
What are some alternatives?
dnsproxy - Simple DNS proxy with DoH, DoT, DoQ and DNSCrypt support
libcurl - A command line tool and library for transferring data with URL syntax, supporting DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP, HTTPS, IMAP, IMAPS, LDAP, LDAPS, MQTT, POP3, POP3S, RTMP, RTMPS, RTSP, SCP, SFTP, SMB, SMBS, SMTP, SMTPS, TELNET, TFTP, WS and WSS. libcurl offers a myriad of powerful features
dns-server-setup - Ansible playbook to easily deploy new, fully configured, DNS servers.
wgcf - 🚤 Cross-platform, unofficial CLI for Cloudflare Warp
serverless-dns - The RethinkDNS resolver that deploys to Cloudflare Workers, Deno Deploy, Fastly, and Fly.io
DoH
Unbound - Unbound is a validating, recursive, and caching DNS resolver.
docker-cloudflared - Cloudflared proxy-dns Docker image
outline-apps - Outline Client and Manager, developed by Jigsaw. Outline Manager makes it easy to create your own VPN server. Outline Client lets you share access to your VPN with anyone in your network, giving them access to the free and open internet.
oci-arm-host-capacity - This script allows to bypass Oracle Cloud Infrastructure 'Out of host capacity' error immediately when additional OCI capacity will appear in your Home Region / Availability domain.