Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

upstream disconnected? #30

Open
jol64 opened this issue Jan 21, 2025 · 1 comment
Open

upstream disconnected? #30

jol64 opened this issue Jan 21, 2025 · 1 comment

Comments

@jol64
Copy link

jol64 commented Jan 21, 2025

I am trying to configure my DNS server to support DoH using the approach described in this repo. However when I try
curl -vH "accept: application/dns-json" "https://redacted/dns-query?name=redacted&type=A"
I - after a timeout - get a 502.

nginx error.log shows the following:
2025/01/21 18:34:35 [info] 56618#56618: *15 client 127.0.0.1:48790 connected to 127.0.0.1:8053
2025/01/21 18:34:35 [info] 56618#56618: *15 proxy 192.168.177.18:35244 connected to 192.168.177.19:53
2025/01/21 18:34:35 [warn] 56618#56618: *15 js: process_doh_request: DNS Req: GET /dns-query?name=redacted&type=A HTTP/1.1
2025/01/21 18:35:05 [info] 56618#56618: *15 upstream disconnected, bytes from/to client:133/0, bytes from/to upstream:0/0
2025/01/21 18:35:05 [error] 56618#56618: *13 upstream prematurely closed connection while reading response header from upstream, client: 192.168.177.18, server: , request: "GET /dns-query?name=redacted&type=A HTTP/2.0", up

I have been using tcpdump to look at the communication 192.168.177.18:35244 to 192.168.177.19:53, but it looks like there is no DNS request included (no ascii visible, no DNS decode by tcpdump).

nginx is version 1.26.2.

Any idea what I am doing wrong?

@jol64
Copy link
Author

jol64 commented Jan 22, 2025

dig +https does work. This implementation is obviously more picky on what input it accepts than others.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant