Re: DoH plugin for BIND

2020-04-29 Thread Evan Hunt
> Does BIND have a DoH plugin official? > Or is there any guide to customize that one? Not yet, but we plan to have a DoH implementation in named by the end of this year. In the meantime, there are DoH proxies that can run BIND as the back-end. -- Evan Hunt -- e...@isc.org Internet Systems Cons

How to define a name with an empty RRset?

2020-04-29 Thread Alessandro Vesely
Hi all, the doc says each node has a set of resource information, which may be empty. But how do I create such a node? If I just write, say: an-emty-name.example.com. named-checkzone complains about unexpected end of input. NULL is not usable in master files. For the time being, I try:

Re: How to define a name with an empty RRset?

2020-04-29 Thread Ondřej Surý
Hi, to create a empty non-terminal (ENT) you should do: non-empty.an-empty-name.example.com. IN TXT Ondrej -- Ondřej Surý ond...@isc.org > On 29 Apr 2020, at 12:22, Alessandro Vesely wrote: > > Hi all, > > the doc says each node has a set of resource information, which may be empty. > But h

Re: How to define a name with an empty RRset?

2020-04-29 Thread Alessandro Vesely
Great! Thank you Ondrej Ale On 29/04/2020 12:26, Ondřej Surý wrote: > Hi, > > to create a empty non-terminal (ENT) you should do: > > non-empty.an-empty-name.example.com. IN TXT > > Ondrej > -- > Ondřej Surý > ond...@isc.org > >> On 29 Apr 2020, at 12:22, Alessandro Vesely wrote: >> >> Hi

Re: How to define a name with an empty RRset?

2020-04-29 Thread Scott Morizot
On Wed, Apr 29, 2020 at 5:23 AM Alessandro Vesely wrote: > Hi all, > > the doc says each node has a set of resource information, which may be > empty. > But how do I create such a node? If I just write, say: > > an-emty-name.example.com. > I believe that's a reference to empty non-terminals

Re: DoH plugin for BIND

2020-04-29 Thread Tony Finch
Walter Peng wrote: > > Does BIND have a DoH plugin official? > Or is there any guide to customize that one? You'll need to run a DoH proxy in front of BIND, for example https://dnsdist.org/ - my DoH service uses https://dotat.at/cgi/git/doh101.git Tony. -- f.anthony.n.finchhttp://dotat.at/

Re: DoH plugin for BIND

2020-04-29 Thread Michael De Roover
On that subject, how about DoT? I have mixed feelings about using 443 as a kitchen sink port but encrypting DNS seems like a good idea. On 4/29/20 9:40 AM, Evan Hunt wrote: Does BIND have a DoH plugin official? Or is there any guide to customize that one? Not yet, but we plan to have a DoH imp

Re: DoH plugin for BIND

2020-04-29 Thread Victoria Risk
> On Apr 29, 2020, at 11:06 AM, Michael De Roover wrote: > > On that subject, how about DoT? I have mixed feelings about using 443 as a > kitchen sink port but encrypting DNS seems like a good idea. We are planning to have DoT on the same timeline as DOH, so nobody has to choose one or the o

Re: DoH plugin for BIND

2020-04-29 Thread Tony Finch
Michael De Roover wrote: > On that subject, how about DoT? DoT is easier since you only need a raw TLS reverse proxy, and there are lots of those, for example, nginx: http://dotat.at/cgi/git/doh101.git/blob/HEAD:/roles/doh101/files/nginx.conf#l48 Note that if you enable DoT on port 853 on your

Re: DoH plugin for BIND

2020-04-29 Thread Evan Hunt
On Wed, Apr 29, 2020 at 08:06:20PM +0200, Michael De Roover wrote: > On that subject, how about DoT? I have mixed feelings about using 443 as a > kitchen sink port but encrypting DNS seems like a good idea. Native support by the end of the year, same as DoH. Also, there's a sample configuration fo