Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Custom bootstrap DNS servers

See original GitHub issue

Today, the DNS over HTTPS client resolves IPs for the DNS over HTTPS endpoint over OS / network supplied DNS resolvers which may or may not block resolution of the DNS over HTTPS endpoint.

To circumvent that, consider supplying custom DNS resolvers to the http.Client [0].

The environment can still block / rewrite all requests on port 53… so that still remains unmitigated.

[0] nextdns/run.go#L427.

Issue Analytics

State:
Created 3 years ago
Comments:8

Top GitHub Comments

2reactions

ilikenwfcommented, Jul 24, 2021

And for those of us who use a VPN with internal hostnames, it would be nice if we could fallback to the custom bootstrap so that we can resolve our internal lan hostnames, unless it would be easier to let us add our own extra encrypted resolvers.

1reaction

ilikenwfcommented, Nov 20, 2021

I don’t…remember, sorry, but that sounds right.

I’m using GrapheneOS, and with the power of Wireguard split tunneling, it seems that “auto” mode at the OS level is working well enough.

Top Results From Across the Web

Upstream and bootstrap DNS question #2920 - GitHub

Hi! What are you trying to achieve exactly? Bootstrap addresses are basically only used to resolve the hosts in the upstreams section.

AdGuard v7.9 for Windows: DNS bootstrap and improved ...

Now you can specify IP addresses of the DNS servers that are used to determine the address of the encrypted DNS servers. What...

Hosting Custom Domains - Bootstrap Studio

In the CloudFlare dashboard, select your domain name and in the DNS tab, fill in the settings you were given in the previous...

What should my Bootstrap dns servers be? : r/Adguard - Reddit

I think it translates the url of DoH (DNS over HTTPS). ... some servers tls can be used as well for bootstrap for...

Bootstrapping Procedure to Discover and Authenticate DoT ...

https://tools.ietf.org/html/draft-reddy-dprive-bootstrap-dns-server-02. IETF 104, Prague ... Internal attacker can modify the DNS response to point to.