Re:Serverless DNS: Self-hosted DNS resolver at the edge
by shaky-carrousel on Saturday July 30, 2022 @11:13AM
(#32287412)
My ISP analyzes the SNI headers. I really need Encrypted Client Hello.
Re:Serverless DNS: Self-hosted DNS resolver at the edge
by O__________O on Saturday July 30, 2022 @11:32AM
(#32287574)
For others not familiar with SNI vs ECH, Cloudflare has a post on it:
Re:Serverless DNS: Self-hosted DNS resolver at the edge
by shaky-carrousel on Monday August 01, 2022 @09:54AM
(#32305958)
I really really like how your username looks.
Re:Serverless DNS: Self-hosted DNS resolver at the edge
by ignoramous on Saturday July 30, 2022 @02:22PM
(#32289064)
Cloudflare Workers supports ECH out of the box. Also, one can deploy serverless-dns against any sub-domain that's available with underlying provider (mydoh.workers.dev, yourdoh.deno.dev, dohapp.fly.dev, etc) and keep changing the sub-domain for free to defeat SNI-based censorship.
Let's say that the government / some central entity takes the blocking a step further by blocking Cloudflare's DNS-over-HTTPS (DoH) endpoint. I could just spin up a new instance on fly.io (or really any other service of your choosing), and use the new endpoint as the new DoH endpoint.
What I like about this service is the fact that I can still use a blocklist to block trackers & ads, just like how you would with NextDNS. Most of the services listed in the example page are pretty generous with their free plans, so the whole setup may end up being cheaper than the Pro plan[1] of NextDNS.
[0]: A number of quite essential services just got blocked by the government where I live, so this is a very real possibility.
[1]: https://nextdns.io/pricing