[{"_1":2,"_163":-5,"_164":-5},"loaderData",{"_3":4,"_18":19,"_26":27,"_142":143},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7,"_13":14,"_15":16,"_17":11},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","theme","system","contrast","normal","dockerRebrandTour","routes/_layout",{"_20":-5,"_21":22,"_23":22,"_24":11,"_25":22},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_28":29,"_30":-5,"_31":11,"_32":11,"_33":34,"_35":36,"_37":-5,"_38":11,"_39":40,"_89":-5,"_90":91,"_130":-5,"_131":11,"_132":22,"_133":11,"_134":11,"_135":-5,"_136":11,"_137":-5,"_138":139,"_140":92,"_141":-7},"canonicalUrl","https://hub.docker.com/r/exesse/dot-proxy/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","exesse","reponame","dot-proxy","cloudBuildSource","isAutobuildsAvailable","repo",{"_41":42,"_43":44,"_46":47,"_48":49,"_50":11,"_51":52,"_53":54,"_55":56,"_58":36,"_33":34,"_59":60,"_61":45,"_62":63,"_64":65,"_66":67,"_68":-5,"_69":63,"_70":71,"_72":11,"_73":34,"_74":75,"_80":11,"_81":82,"_86":34,"_87":88},"categories",[],"content_types",[45],"image","date_registered","2020-04-02T13:15:04.481187Z","description","Python implementation for DNS over TLS proxy server","is_private","last_updated","2020-04-16T14:25:42.986794Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[57],"application/vnd.docker.container.image.v1+json","name","pull_count",1082,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","# dot-proxy\nPython implementation of simple DNS over TLS proxy server.\n\nListens for both TCP and UDP messages on native 53 port. Converts plain UDP packets to TCP by prefixing message with a \ntwo bytes length field which the incoming UDP message have [[1]](#1).\n\nBy default establishes SSL connection with Cloudflare DNS (1.1.1.1) over 853 port. Python function \n'create_default_context' from build-in **ssl** library was used to establish connection with nameserver. \nThe function loads system's trusted CA certificates, does hostname checking and sets reasonable secure \nprotocol and cipher settings [[2]](#2).\n\nDefault buffer size is set to 1024, which is sufficient for most DNS queries. Socket is set to 5 seconds timeout which \ncorresponds with the default timeout of dns tools like 'dig' or 'kdig'. \n\n#### HOW TO RUN\n\n**Option 1.**\n\nPull docker container from dockerhub.\n\n`docker run {-d -p :53 -p :53/udp --name } exesse/dot-proxy`\n\n**Option 2.**\n\nRun source code directly.\n\n`sudo ./dot-proxy.py`\n\n*by default non-root users are not allowed to use ports below 1024 on *nix systems. Please make sure that port 53 \nis not in use and firewall software allows incoming connections to the mentioned port. To start proxy on custom \nport simply adjust 'proxy_port' variable in 'dot-proxy.py' file. \n\n#### HOW TO TEST\n\n'Dig', 'kdig', 'drill', 'wireshark' could be used for testing. Here is a TCP test example performed with 'kdig' tool.\n\n````bash\nkdig @172.17.0.2 n26.com A +tcp\n;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 6574\n;; Flags: qr rd ra; QUERY: 1; ANSWER: 1; AUTHORITY: 0; ADDITIONAL: 0\n\n;; QUESTION SECTION:\n;; n26.com. \t\tIN\tA\n\n;; ANSWER SECTION:\nn26.com. \t44\tIN\tA\t128.65.211.162\n\n;; Received 48 B\n;; Time 2020-04-02 16:40:02 CEST\n;; From 172.17.0.2@53(TCP) in 152.7 ms\n````\n\nAnd here is another example again with 'kdig', but this time over UDP. \n```bash\nkdig @172.17.0.2 n26.com AAAA\n;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 58993\n;; Flags: qr rd ra; QUERY: 1; ANSWER: 0; AUTHORITY: 1; ADDITIONAL: 0\n\n;; QUESTION SECTION:\n;; n26.com. \t\tIN\tAAAA\n\n;; AUTHORITY SECTION:\nn26.com. \t155\tIN\tSOA\tns-1688.awsdns-19.co.uk. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400\n\n;; Received 116 B\n;; Time 2020-04-02 16:34:59 CEST\n;; From 172.17.0.2@53(UDP) in 175.4 ms\n````\n\n**Links**\n\n[1] \nRFC1035 - Domain names - implementation and specification.\nLink: \nhttps://tools.ietf.org/html/rfc1035\n\n[2]\nssl — TLS/SSL wrapper for socket objects. \nLink: \nhttps://docs.python.org/3/library/ssl.html\n","has_starred","hub_user","immutable_tags_settings",{"_76":11,"_77":78},"enabled","rules",[79],".*","is_automated","permissions",{"_83":22,"_84":11,"_85":11},"read","write","admin","user","storage_size",36463531,"orgData","recentTags",[92],{"_93":45,"_94":95,"_96":97,"_98":99,"_100":101,"_51":119,"_120":95,"_121":34,"_122":57,"_58":123,"_124":125,"_126":110,"_127":119,"_128":67,"_129":22},"content_type","creator",7542356,"full_size",36442219,"id",93597292,"images",[102],{"_103":104,"_105":106,"_107":108,"_109":110,"_111":112,"_113":114,"_115":108,"_116":-5,"_117":97,"_64":67,"_118":-5},"architecture","amd64","digest","sha256:a933cde22a71c82c123f0cf40936be6cc136c35883745d4f5c71810dd3c6a91e","features","","last_pulled","2026-10-20T13:38:16.905414007Z","last_pushed","2020-04-16T13:52:46Z","os","linux","os_features","os_version","size","variant","2020-04-16T14:25:42.569919Z","last_updater","last_updater_username","media_type","latest","repository",8759504,"tag_last_pulled","tag_last_pushed","tag_status","v2","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","showSbxRunInCloud","showSbxLogoOverride","sbxTrademarkText","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"selectedTag","attestationsUrl","routes/_layout.r.$namespace.$reponame.tags",{"_39":144,"_151":152,"_138":161,"_162":11},{"_41":145,"_43":146,"_46":47,"_48":49,"_50":11,"_51":52,"_53":54,"_55":147,"_58":36,"_33":34,"_59":60,"_61":45,"_62":63,"_64":65,"_66":67,"_68":-5,"_69":63,"_70":71,"_72":11,"_73":34,"_74":148,"_80":11,"_81":150,"_86":34,"_87":88},[],[45],[57],{"_76":11,"_77":149},[79],{"_83":22,"_84":11,"_85":11},"tags",{"_153":65,"_154":-5,"_155":-5,"_156":157},"count","next","previous","results",[158],{"_93":45,"_94":95,"_96":97,"_98":99,"_100":159,"_51":119,"_120":95,"_121":34,"_122":57,"_58":123,"_124":125,"_126":110,"_127":119,"_128":67,"_129":22},[160],{"_103":104,"_105":106,"_107":108,"_109":110,"_111":112,"_113":114,"_115":108,"_116":-5,"_117":97,"_64":67,"_118":-5},[],"canDeleteTags","actionData","errors"]

exesse/dot-proxy

Tags for exesse/dot-proxy