"RFC9463: DHCP and Router Advertisement Options for the Discovery of
Network-designated Resolvers (DNR)"
https://datatracker.ietf.org/doc/html/rfc9463

144     OPTION_V6_DNR
162     OPTION_V4_DNR

https://kea.readthedocs.io/en/kea-2.6.0/arm/dhcp4-srv.html#dnr-discovery-of-network-designated-resolvers-options-for-dhcpv4

https://kea.readthedocs.io/en/kea-2.6.0/arm/dhcp6-srv.html#dnr-discovery-of-network-designated-resolvers-options-for-dhcpv6
:

"""
The following example shows how to configure more than one ALPN
protocol in Service Parameters. The example specifies a resolver known
as resolver.example that supports:

- DoT on default port 853
- DoQ on default port 853
- DoH at https://resolver.example/q{?dns}

{
  "name": "v6-dnr", // name of the option

  // Note the double backslash-escaped commas in the alpn-id list.
  "data": "150, resolver.example., 2001:db8::1 2001:db8::2,
alpn=dot\\,doq\\,h2\\,h3 dohpath=/q{?dns}"
}

The above option will be encoded on-wire as follows:
"""

Are there already discussions of adding DoH / DoT / DoQ support to
dnsmasq? Is it more than adding an openssl dependency?

Are there already discussions of adding RFC9463 DNR support to dnsmasq?

RFC9463 "DNR" allows DHCP servers to indicate to clients that there
are encrypted DNS resolver settings to use.

_______________________________________________
Dnsmasq-discuss mailing list
Dnsmasq-discuss@lists.thekelleys.org.uk
https://lists.thekelleys.org.uk/cgi-bin/mailman/listinfo/dnsmasq-discuss

Reply via email to