Unable to Query DoH with `tls none` and Plain HTTP
r1wcp42w at bbqporkmccity.com
r1wcp42w at bbqporkmccity.com
Mon Jan 1 12:35:50 UTC 2024
Hello,
Hope you are having a great day.
I am trying to setup a BIND9 DNS over HTTP (DoH but in plain HTTP)
server with the ubuntu/bind9:latest docker image behind a HTTPS load
balancer however I am unable to perform any DNS query with the newly
installed BIND9 server(not through the load balancer).
I am getting the following when I try to perform the query:
> ➜ curl -v -H 'accept: application/dns-message' 'http://172.23.0.2:80/dns-query?dns=AAABAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB'
> * Trying 172.23.0.2:80...
> * Connected to 172.23.0.2 (172.23.0.2) port 80
>> GET /dns-query?dns=AAABAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB HTTP/1.1
>> Host: 172.23.0.2
>> User-Agent: curl/8.5.0
>> accept: application/dns-message
>>
> * Received HTTP/0.9 when not allowed
> * Closing connection
> curl: (1) Received HTTP/0.9 when not allowed
and here is my named.conf.options
> options {
> directory "/var/cache/bind";
>
> // If there is a firewall between you and nameservers you want
> // to talk to, you may need to fix the firewall to allow multiple
> // ports to talk. See http://psrp.bbqporkmccity.com/vye5rn/iw5hSZ1O
>
> // If your ISP provided one or more IP addresses for stable
> // nameservers, you probably want to use them as forwarders.
> // Uncomment the following block, and insert the addresses replacing
> // the all-0's placeholder.
>
> // forwarders {
> // 0.0.0.0;
> // };
>
> //========================================================================
> // If BIND logs error messages about the root key being expired,
> // you will need to update your keys. See http://psrp.bbqporkmccity.com/vye5rn/nH13n27l
> //========================================================================
> dnssec-validation auto;
>
> listen-on-v6 { any; };
>
> // Custom Options From Here
>
> allow-query { any;};
>
> allow-transfer { none; };
>
> listen-on port 53 { any; };
> listen-on port 80 tls none http default { any; };
>
> };
Am I doing something wrong?
Thank you very much and I am looking forward to a solution.
More information about the bind-users
mailing list