https://github.com/steventblack/dns-noise

Simple utility to add a stream of DNS queries for random domains to obfuscate traffic patterns.
https://github.com/steventblack/dns-noise

dns pihole

Last synced: about 1 month ago
JSON representation

Simple utility to add a stream of DNS queries for random domains to obfuscate traffic patterns.

• Host: GitHub
• URL: https://github.com/steventblack/dns-noise
• Owner: steventblack
• License: mit
• Created: 2020-07-10T22:07:50.000Z (over 4 years ago)
• Default Branch: master
• Last Pushed: 2023-10-18T00:04:43.000Z (about 1 year ago)
• Last Synced: 2024-09-27T13:03:45.715Z (about 2 months ago)
• Topics: dns, pihole
• Language: Go
• Homepage:
• Size: 115 KB
• Stars: 9
• Watchers: 1
• Forks: 1
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# dns-noise

This is a simple utility designed to work in conjunction with a local Pihole to generate a steady stream of DNS queries against random domains.

The random DNS queries provide a degree of noise that makes discerning user-driven DNS queries more difficult to identify. 

The default list of random domains is pulled from [Cisco Umbrella](https://umbrella.cisco.com/blog/cisco-umbrella-1-million), 

which provide a list of the top 1,000,000 accessed domains and is updated every 24h.

## General Information ##

This service can utilize a pihole to dynamically adjust its own query rate. If configured properly, it polls the pihole's query activity and adjusts

its own rate based on the activity level returned. If a pihole is not available (or not configured properly), it will generate a random rate value between 

a stated min/max interval. A new random rate will be generated periodically. 

The noise generated from this service can obfuscate typical attempts to identify or track user activity based on domain lookups. However,

a determined party may still be able to differentiate the noise from legitimate traffic given enough time, activity logs, and effort.

## Running ##

```

dns-noise [-c|--conf confpath] [-d|--database dbpath] [-r|--reusedb] --min min_interval --max max_interval

-c|--conf confpath

  Specifies the path to the configuration file. 

  Default path is "dns-noise.conf".

-d|--databse dbpath

  Specifies the path for the database with the list of "noise" domains. 

  Default path is "/tmp/dns-noise.db"

-r|--reusedb

  Boolean flag used to prevent refreshing the "noise" domains database on startup. 

  Default is false.

--min min_interval

  Specifies the minimum duration between queries. 

  It accepts any duration string that can be parsed by Go's time.ParseDuration. Default is 100ms.

--max max_interval

  Specifies the maximum duration between queries. 

  It accepts any duration string that can be parsed by Go's time.ParseDuration. Default is 15s.

```

## Installation ##

_Coming Soon_

## Config ##

_Coming Soon_