{"id":13837267,"url":"https://github.com/albertito/dnss","last_synced_at":"2025-07-10T12:12:35.649Z","repository":{"id":41432236,"uuid":"44473884","full_name":"albertito/dnss","owner":"albertito","description":"DNS over HTTPS [mirror]","archived":false,"fork":false,"pushed_at":"2024-05-12T09:09:37.000Z","size":249,"stargazers_count":121,"open_issues_count":3,"forks_count":17,"subscribers_count":10,"default_branch":"main","last_synced_at":"2024-05-13T09:42:56.132Z","etag":null,"topics":["dns","dns-proxy","doh","doh-server","go-application","https-proxy","security"],"latest_commit_sha":null,"homepage":"https://blitiri.com.ar/git/r/dnss/","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/albertito.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2015-10-18T10:29:13.000Z","updated_at":"2024-05-30T03:15:20.781Z","dependencies_parsed_at":"2023-02-15T11:35:22.607Z","dependency_job_id":"c347a452-2e63-4c62-93b2-93bb5ef6ee86","html_url":"https://github.com/albertito/dnss","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/albertito/dnss","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/albertito%2Fdnss","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/albertito%2Fdnss/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/albertito%2Fdnss/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/albertito%2Fdnss/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/albertito","download_url":"https://codeload.github.com/albertito/dnss/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/albertito%2Fdnss/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":264578386,"owners_count":23631543,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["dns","dns-proxy","doh","doh-server","go-application","https-proxy","security"],"created_at":"2024-08-04T15:01:04.943Z","updated_at":"2025-07-10T12:12:35.605Z","avatar_url":"https://github.com/albertito.png","language":"Go","funding_links":[],"categories":["Go"],"sub_categories":[],"readme":"\n# dnss\n\ndnss is a daemon for using DNS over HTTPS.\n\nIt can act as a proxy, receiving DNS requests and resolving them using\nDNS-over-HTTPs (DoH). This can be useful to improve DNS security and privacy\non laptops and small/home networks.\n\nIt can also act as a DoH server, in case you want end to end control.\n\n[![Tests](https://github.com/albertito/dnss/actions/workflows/tests.yaml/badge.svg)](https://github.com/albertito/dnss/actions/workflows/tests.yaml)\n[![Go Report Card](https://goreportcard.com/badge/github.com/albertito/dnss)](https://goreportcard.com/report/github.com/albertito/dnss)\n[![Coverage](https://codecov.io/github/albertito/dnss/branch/next/graph/badge.svg?token=9beu58pgFX)](https://codecov.io/github/albertito/dnss)\n\n\n## Features\n\n* Supports the\n  [DNS Queries over HTTPS (DoH)](https://en.wikipedia.org/wiki/DNS_over_HTTPS)\n  standard ([RFC 8484](https://tools.ietf.org/html/rfc8484)).\n* Local cache (optional).\n* HTTP(s) proxy support, autodetected from the environment.\n* Monitoring HTTP server, with exported variables and tracing to help\n  debugging.\n* Separate resolution for specific domains, useful for home networks with\n  local DNS servers.\n\n\n## Install\n\n### Debian/Ubuntu\n\nThe `dnss` package installs the daemon configured in proxy mode and ready to\nuse, using Google's public resolvers (and easily changed via configuration).\n\n```shell\nsudo apt install dnss\n```\n\n\n### Manual install\n\nTo clone the repository and build the binary:\n\n```shell\ngit clone https://blitiri.com.ar/repos/dnss\ncd dnss\ngo build\n```\n\nAnd if you want to configure the daemon to be automatically run by systemd:\n\n```shell\n# Copy the binary to a system-wide location.\nsudo cp dnss /usr/local/bin/\n\n# Set it up in systemd.\nsudo cp etc/systemd/dns-to-https/*  /etc/systemd/system/\n\nsudo systemctl dnss enable\n```\n\nOn systems with SELinux, like Fedora, you might see hidden errors. In that\ncase, run this to set the security context for the binary:\n\n```sh\nsudo semanage fcontext -a -t bin_t \"/usr/local/bin/dnss\"\nsudo restorecon -v /usr/local/bin/dnss\n```\n\n\n## Examples\n\n### DNS server (proxy mode)\n\nListens on port 53 for DNS queries, resolves them using the given HTTPS URL.\n\n```shell\n# Use the default HTTPS URL (currently, dns.google):\ndnss -enable_dns_to_https\n\n# Use Cloudflare's 1.1.1.1:\ndnss -enable_dns_to_https -https_upstream=\"https://1.1.1.1/dns-query\"\n\n# Use Google's dns.google:\ndnss -enable_dns_to_https -https_upstream=\"https://dns.google/dns-query\"\n\n# Use the default HTTPS URL for all resolutions, except for domain \"myhome\"\n# which is resolved via a local DNS server.\ndnss -enable_dns_to_https -dns_server_for_domain=\"myhome:10.0.1.1:53\"\n```\n\n### HTTPS server\n\nReceives DNS over HTTPS requests, resolves them using the machine's configured\nDNS servers, and returns the replies.  You will need to have certificates for\nthe domains you want to serve.\n\nSupports both DoH and JSON modes automatically, and the endpoints are\n`/dns-query` and `/resolve`.\n\n```shell\n# Serve DNS over HTTPS requests, take certificates from letsencrypt.\nDOMAIN=yourdomain.com\ndnss -enable_https_to_dns \\\n  -https_key=/etc/letsencrypt/live/$DOMAIN/privkey.pem \\\n  -https_cert=/etc/letsencrypt/live/$DOMAIN/fullchain.pem\n```\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Falbertito%2Fdnss","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Falbertito%2Fdnss","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Falbertito%2Fdnss/lists"}