<!DOCTYPE html><html><head><title></title><style type="text/css">p.MsoNormal,p.MsoNoSpacing{margin:0}
p.MsoNormal,p.MsoNoSpacing{margin:0}
p.MsoNormal,p.MsoNoSpacing{margin:0}</style></head><body><div>Hello all,<br></div><div><br></div><div>I am trying to configure DOH over HTTP and I can't seem to figure out what I'm doing wrong. I have a nginx proxying the incoming request and don't need it on HTTPS. Here's my config<br></div><div><br></div><div style="color:rgb(171, 178, 191);background-color:rgb(40, 44, 52);font-family:FiraCode-Retina, Menlo, Monaco, "Courier New", monospace;font-weight:normal;font-size:12px;line-height:18px;white-space:pre;"><div><span style="color:rgb(127, 132, 142);"><i>--- doh over http</i></span><br></div><div><span style="color:rgb(97, 175, 239);">setACL</span><span style="color:rgb(171, 178, 191);">({</span><span style="color:rgb(152, 195, 121);">"0.0.0.0/0"</span><span style="color:rgb(171, 178, 191);">, </span><span style="color:rgb(152, 195, 121);">"::/0"</span><span style="color:rgb(171, 178, 191);">})</span><br></div><div><span style="color:rgb(97, 175, 239);">addLocal</span><span style="color:rgb(171, 178, 191);">(</span><span style="color:rgb(152, 195, 121);">'0.0.0.0:7070'</span><span style="color:rgb(171, 178, 191);">)</span><br></div><div><span style="color:rgb(97, 175, 239);">webserver</span><span style="color:rgb(171, 178, 191);">(</span><span style="color:rgb(152, 195, 121);">"127.0.0.1:8083"</span><span style="color:rgb(171, 178, 191);">)</span><br></div><div><br></div><div><span style="color:rgb(97, 175, 239);">newServer</span><span style="color:rgb(171, 178, 191);">({</span><span style="color:rgb(224, 108, 117);">address</span><span style="color:rgb(171, 178, 191);">=</span><span style="color:rgb(152, 195, 121);">"1.1.1.1"</span><span style="color:rgb(171, 178, 191);">, </span><span style="color:rgb(224, 108, 117);">pool</span><span style="color:rgb(171, 178, 191);">=</span><span style="color:rgb(152, 195, 121);">"pub-unsafe-tier1"</span><span style="color:rgb(171, 178, 191);">,</span><span style="color:rgb(224, 108, 117);">name</span><span style="color:rgb(171, 178, 191);">=</span><span style="color:rgb(152, 195, 121);">"cloudflare"</span><span style="color:rgb(171, 178, 191);">})</span><br></div><div><span style="color:rgb(97, 175, 239);">newServer</span><span style="color:rgb(171, 178, 191);">({</span><span style="color:rgb(224, 108, 117);">address</span><span style="color:rgb(171, 178, 191);">=</span><span style="color:rgb(152, 195, 121);">"8.8.8.8"</span><span style="color:rgb(171, 178, 191);">, </span><span style="color:rgb(224, 108, 117);">pool</span><span style="color:rgb(171, 178, 191);">=</span><span style="color:rgb(152, 195, 121);">"pub-unsafe-tier1"</span><span style="color:rgb(171, 178, 191);">,</span><span style="color:rgb(224, 108, 117);">name</span><span style="color:rgb(171, 178, 191);">=</span><span style="color:rgb(152, 195, 121);">"google"</span><span style="color:rgb(171, 178, 191);">})</span><br></div><div><span style="color:rgb(97, 175, 239);">newServer</span><span style="color:rgb(171, 178, 191);">({</span><span style="color:rgb(224, 108, 117);">address</span><span style="color:rgb(171, 178, 191);">=</span><span style="color:rgb(152, 195, 121);">"194.242.2.2"</span><span style="color:rgb(171, 178, 191);">,</span><span style="color:rgb(224, 108, 117);">pool</span><span style="color:rgb(171, 178, 191);">=</span><span style="color:rgb(152, 195, 121);">"pub-safe-tier1"</span><span style="color:rgb(171, 178, 191);">,</span><span style="color:rgb(224, 108, 117);">name</span><span style="color:rgb(171, 178, 191);">=</span><span style="color:rgb(152, 195, 121);">"mullvad-noadblock"</span><span style="color:rgb(171, 178, 191);">,</span><span style="color:rgb(224, 108, 117);">checkInterval</span><span style="color:rgb(171, 178, 191);">=</span><span style="color:rgb(209, 154, 102);">60</span><span style="color:rgb(171, 178, 191);">})</span><br></div><div><span style="color:rgb(97, 175, 239);">newServer</span><span style="color:rgb(171, 178, 191);">({</span><span style="color:rgb(224, 108, 117);">address</span><span style="color:rgb(171, 178, 191);">=</span><span style="color:rgb(152, 195, 121);">"84.200.69.80"</span><span style="color:rgb(171, 178, 191);">, </span><span style="color:rgb(224, 108, 117);">pool</span><span style="color:rgb(171, 178, 191);">=</span><span style="color:rgb(152, 195, 121);">"pub-safe-tier2"</span><span style="color:rgb(171, 178, 191);">,</span><span style="color:rgb(224, 108, 117);">name</span><span style="color:rgb(171, 178, 191);">=</span><span style="color:rgb(152, 195, 121);">"dnswatch1"</span><span style="color:rgb(171, 178, 191);">,</span><span style="color:rgb(224, 108, 117);">checkInterval</span><span style="color:rgb(171, 178, 191);">=</span><span style="color:rgb(209, 154, 102);">60</span><span style="color:rgb(171, 178, 191);">})</span><br></div><div><span style="color:rgb(97, 175, 239);">newServer</span><span style="color:rgb(171, 178, 191);">({</span><span style="color:rgb(224, 108, 117);">address</span><span style="color:rgb(171, 178, 191);">=</span><span style="color:rgb(152, 195, 121);">"84.200.70.40"</span><span style="color:rgb(171, 178, 191);">, </span><span style="color:rgb(224, 108, 117);">pool</span><span style="color:rgb(171, 178, 191);">=</span><span style="color:rgb(152, 195, 121);">"pub-safe-tier2"</span><span style="color:rgb(171, 178, 191);">,</span><span style="color:rgb(224, 108, 117);">name</span><span style="color:rgb(171, 178, 191);">=</span><span style="color:rgb(152, 195, 121);">"dnswatch2"</span><span style="color:rgb(171, 178, 191);">,</span><span style="color:rgb(224, 108, 117);">checkInterval</span><span style="color:rgb(171, 178, 191);">=</span><span style="color:rgb(209, 154, 102);">60</span><span style="color:rgb(171, 178, 191);">})</span><br></div><div><br></div><div><br></div><div><span style="color:rgb(97, 175, 239);">addDOHLocal</span><span style="color:rgb(171, 178, 191);">(</span><span style="color:rgb(152, 195, 121);">"0.0.0.0:9090"</span><span style="color:rgb(171, 178, 191);">,</span><span style="color:rgb(209, 154, 102);">nil</span><span style="color:rgb(171, 178, 191);">,</span><span style="color:rgb(209, 154, 102);">nil</span><span style="color:rgb(171, 178, 191);">, </span><span style="color:rgb(152, 195, 121);">"/dns-query"</span><span style="color:rgb(171, 178, 191);">, { </span><span style="color:rgb(224, 108, 117);">reusePort</span><span style="color:rgb(171, 178, 191);">=</span><span style="color:rgb(209, 154, 102);">true</span><span style="color:rgb(171, 178, 191);">, </span><span style="color:rgb(224, 108, 117);">trustForwardedForHeader</span><span style="color:rgb(171, 178, 191);">=</span><span style="color:rgb(209, 154, 102);">true</span><span style="color:rgb(171, 178, 191);"> })</span><br></div><div>```<br></div></div><div><br></div><div>When testing on the locally, here's what I get:<br></div><div><br></div><div>$ curl -H 'accept: application/dns-message' '<a href="http://localhost:9090/dns-query?dns=AAABAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB">http://localhost:9090/dns-query?dns=AAABAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB</a>'<br></div><div><br></div><div>dns query not allowed<br></div><div><br></div><div>$ ...<br></div><div><br></div><div><br></div><div>Where am I going wrong?<br></div><div><br></div><div>Best,<br></div><div>Chandra<br></div><div><br></div><div><br></div></body></html>