Linux上学会使用DNS over HTTPS

适用场景：在国内有台linux服务器，解析不想被污染,可以采用此方法。

官网下载Cloudflared二进制程序

下载链接

wget https://bin.equinox.io/c/VdrWdbjqyF/cloudflared-stable-linux-amd64.tgz
tar -zxvf cloudflared-stable-linux-amd64.tgz
mv cloudflared /usr/sbin/
cloudflared --version

Glibc升级到2.17

如果报glibc.so.6的相关错误，就需要升级glibc版本

无损升级glibc-参考

设置本机DNS over HTTPS环境

# cloudflared proxy-dns

INFO[0000] Adding DNS upstream       url="https://1.1.1.1/dns-query"
INFO[0000] Adding DNS upstream       url="https://1.0.0.1/dns-query"
INFO[0000] Starting metrics server   addr="127.0.0.1:49312"
INFO[0000] Starting DNS over HTTPS proxy server  addr="dns://localhost:53"

验证DNS

新开一个窗口进行解析测试

dig flickr.com @127.0.0.1

设置DNS over HTTPS环境为默认DNS环境

mkdir -p /usr/local/etc/cloudflared

cat << EOF > /usr/local/etc/cloudflared/config.yml
  proxy-dns: true
  proxy-dns-upstream:
  - https://1.1.1.1/dns-query
  - https://1.0.0.1/dns-query
EOF

将DNS over HTTPS安装为自启动服务

cloudflared service install

报错：
INFO[0000] Failed to copy user configuration. Before running the service, ensure that /etc/cloudflared contains two files, cert.pem and config.yml  error="open /usr/local/etc/cloudflared/cert.pem: no such file or directory"

解决方法：
cp /etc/cloudflared/cert.pem /usr/local/etc/cloudflared/

再次执行

#loudflared service install

INFO[0000] Copied /usr/local/etc/cloudflared/config.yml to /etc/cloudflared/config.yml 
INFO[0000] Using Systemd                                
INFO[0000] systemctl: Created symlink from /etc/systemd/system/multi-user.target.wants/cloudflared.service to /etc/systemd/system/cloudflared.service.
INFO[0000] systemctl daemon-reload 

服务检查及启动

systemctl enable cloudflared
systemctl start cloudflared
systemctl status cloudflared

最后修改/etc/resolv.conf

echo "nameserver 127.0.0.1" >>/etc/resolv.conf

测试

[root@cloudflared]# dig flickr.com

; <<>> DiG 9.9.4-RedHat-9.9.4-61.el7 <<>> flickr.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 31835
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;flickr.com.			IN	A

;; ANSWER SECTION:
flickr.com.		75	IN	A	69.147.88.7
flickr.com.		75	IN	A	69.147.92.11

;; Query time: 1 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Thu Dec 13 18:06:35 CST 2018
;; MSG SIZE  rcvd: 91

• 本文作者： GaryWu
• 本文链接： https://garywu520.github.io/2018/12/13/Linux上学会使用DNS-over-HTTPS/
• 版权声明： 本博客所有文章除特别声明外，均采用 MIT 许可协议。转载请注明出处！