this post was submitted on 09 Jul 2024
4 points (83.3% liked)

networking

2811 readers
1 users here now

Community for discussing enterprise networks and the ensuing chaos that comes after inheriting or building one.

founded 1 year ago
MODERATORS
manifex@sh.itjust.works
4
Somebody please explain PROXYv2 to me and the myriad of ways to do DoH? (infosec.pub)
submitted 4 months ago by Findmysec@infosec.pub to c/networking@sh.itjust.works
0 comments fedilink hide all child comments
 

I've been looking to implement DoH

  1. The first idea was to simply follow this - I do not understand the configuration fully but it looked fine.
  2. Then, I decided to use a proxy/Load balancer in front of BIND to deal with HTTPS.

However, I came across PROXYv2 (which is not even mentioned in the docs, just in a blog post) and the likes of DNSdist.

My questions:

  1. I can't find a detailed explanation of what I need to do about PROXYv2 - does my Reverse-proxy absolutely need to have it to be able to communicate with my DNS server?
  2. Why can't I just have any reverse-proxy that can handle HTTPS and put it in front of my DNS resolver? Does my proxy need to have a specific protocol to be able to talk DNS queries?

I am still confused, would really appreciate some help :)

no comments (yet)
sorted by: hot top controversial new old
there doesn't seem to be anything here