https://github.com/commonshost/dohnut
🍩 DNS to DNS-over-HTTPS (DoH) proxy server
https://github.com/commonshost/dohnut
Last synced: about 1 year ago
JSON representation
🍩 DNS to DNS-over-HTTPS (DoH) proxy server
- Host: GitHub
- URL: https://github.com/commonshost/dohnut
- Owner: commonshost
- Created: 2018-10-08T15:39:30.000Z (over 7 years ago)
- Default Branch: master
- Last Pushed: 2020-07-07T19:35:24.000Z (almost 6 years ago)
- Last Synced: 2025-04-01T20:13:52.788Z (about 1 year ago)
- Language: JavaScript
- Homepage: https://help.commons.host/dohnut/
- Size: 520 KB
- Stars: 88
- Watchers: 5
- Forks: 7
- Open Issues: 7
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Dohnut
[](https://hub.docker.com/r/commonshost/dohnut)
Dohnut is a DNS to DNS-over-HTTPS (DoH) proxy server. Dohnut improves the performance, security, and privacy of your DNS traffic.
https://help.commons.host/dohnut/
Dohnut works with any open standard ([RFC8484](https://tools.ietf.org/html/rfc8484)) compliant DoH provider, including the [Commons Host](https://commons.host) DoH service and [many others](http://dns-channel.github.io/#recsrv).
## Features
**High Performance** Auto-select the fastest DoH resolver. Continuously adapts to network and service conditions by monitoring the round-trip-tip of the DoH connection using HTTP/2 PING frames.
**High Availability** Allows using multiple DoH resolvers at once to provide automatic failover in case a service is unavailable.
**Zero Overhead** - Network traffic does not go through Dohnut so there is no performance penalty. Only the DNS queries (very little bandwidth) are proxied.
**Lightweight** - Multi-threaded architecture for fast performance on low-power devices like single board computers. Designed for Raspberry Pi and Odroid but compatible with anything that can run Node.js.
**Full Encryption** - DoH encrypts all DNS queries inside a secure HTTP/2 connection. This protects DNS lookups against snooping at your local network router or ISP.
**Connection Sharding** - Spread queries across multiple DoH resolvers for improved privacy. This reduces the amount of information a single DoH service can collect.
**Query Spoofing** - Mask your DNS queries using fake DNS queries. Uses several randomisation techniques and samples from a public list of the top 1 million domains.
**User Agent Spoofing** - Avoid tracking at the HTTP level using fake browser identifiers. Randomly chosen from a public list of real-world browser data.
## Usage
Dohnut is lightweight and cross-platform. Dohnut can operate standalone or with other DNS tools like [Pi-hole](https://pi-hole.net).
Dohnut can be used in several ways:
- [Command line interface](./docs/cli)
- [Docker: container image](./docs/docker)
- [Linux: managed by systemd](./docs/systemd)
- [macOS: managed by launchd](./docs/launchd)
- [Pi-hole: upstream DNS server](./docs/pihole)
- [Docker Compose with Pi-hole: multi-container service](./docs/docker-compose-pihole)
This example launches Dohnut on your local machine to accept DNS connections and proxy them to the Commons Host DNS over HTTPS (DoH) service. See the [command line interface](./docs/cli) reference for more options.
Run using Docker:
```shell
$ docker run --publish 53:53/udp commonshost/dohnut --listen 0.0.0.0:53 --doh commonshost --bootstrap 9.9.9.9
```
... or run using Node.js:
```shell
$ sudo npx dohnut --listen 127.0.0.1:53 --doh https://commons.host
Started listening on 127.0.0.1:53 (udp4)
```
Verify by running a DNS lookup against Dohnut. The query is proxied to the DoH service.
```shell
$ dig @localhost iana.org
; <<>> DiG 9.10.6 <<>> @localhost iana.org
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24758
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;iana.org. IN A
;; ANSWER SECTION:
iana.org. 3591 IN A 192.0.43.8
;; Query time: 4 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; MSG SIZE rcvd: 53
```
## Credits
Made by [Kenny Shen](https://www.machinesung.com) and [Sebastiaan Deckers](https://twitter.com/sebdeckers) for 🐑 [Commons Host](https://commons.host).