doh-client is a DNS over HTTPS client, which opens a local UDP (DNS) port and forwards all DNS queries to a remote
HTTP/2.0 server. By default the client will connect to the Cloudflare DNS service. It uses Tokio
for all asynchronous IO operations and Rustls to connect to the HTTPS server.
doh-client is written in Rust. To build it you need the Rust compiler and build system cargo.
$ cargo build
or to build it as release build
$ cargo build --release
To run the binary, you need one option (see Options)
$ ./doh-client --cafile /path/to/the/ca/file.pem
For example if you use Arch Linux then the following command uses the system cert store:
```
```
systemd)To run the doh-client as daemon and without root under Linux with systemd as init system:
1. Build the binary see Build.
2. Copy as root the systemd config files to /etc/systemd/system/ as follow:
# cp doh-client.service doh-client.socket /etc/systemd/system
3. Reload systemd manager configuration:
# systemctl daemon-reload
4. Enable the doh-client as a daemon:
# systemctl enable doh-client
5. Reboot the system or start the daemon manually:
# systemctl start doh-client
6. Adjust the /etc/resolv.conf by add the following line:
nameserver 127.0.0.1
launchd)To run the doh-client as daemon and without root under Mac OS with launchd as init system:
1. Build the binary see Build.
2. Copy as root the launchd config files to /Library/LaunchDaemons/ as follow:
# cp com.doh-client.daemon.plist /Library/LaunchDaemons
3. Load and start the config file as follow:
# launchctl load -w /Library/LaunchDaemons/com.doh-client.daemon.plist
4. Adjust the /etc/resolv.conf by add the following line:
nameserver 127.0.0.1
doh-client has one required option, --cafile which sets path to a pem file, which contains the trusted CA
certificates.
```
$ ./doh-client --help
DNS over HTTPS client 1.1.1
link.ted@mailbox.org
Open a local UDP (DNS) port and forward DNS queries to a remote HTTP/2.0 server.
By default the client will connect to the Cloudflare DNS service.
USAGE:
doh-client [FLAGS] [OPTIONS] --cafile
FLAGS: -h, --help Prints help information --listen-activation Use file descriptor 3 under Unix as UDP socket or launchactivatesocket() under Mac OS -v Sets the level of verbosity -V, --version Prints version information
OPTIONS:
-c, --cafile