Merge in DNS/dnsproxy from doh3 to master
Squashed commit of the following:
commit 93dc50875caf2df86ce08f22f5fb74e33b7b5ac0
Author: Andrey Meshkov <[email protected]>
Date: Fri Sep 16 18:33:38 2022 +0300
fix review comments
commit d19fd61eb69f31c94a9374396cbbefeb566a2163
Author: Andrey Meshkov <[email protected]>
Date: Fri Sep 16 17:28:21 2022 +0300
upstream: added comments, minor fixes
commit 9e4bf71275e9d1d3bc1cd72e27812548e8158402
Author: Andrey Meshkov <[email protected]>
Date: Fri Sep 16 16:59:57 2022 +0300
upstream: added DoH3 support, added TLS resumption
The changes are pretty considerable in this PR.
First of all, DoH3 support has been added to dnsOverHTTPS. I haven't added
a new type of upstream for that, but added it to the already existing one.
Configuring supported HTTP versions is possible via upstream.Options. When all
versions are enabled, it will "probe" both TLS and QUIC and choose the one that
was faster (just like it's done in Chrome).
Command-line interface now supports a new argument "http3" that is supposed to
enable HTTP/3 globally. At this point it will only enable it for upstreams, but
in the future it will also enable it for the DoH server.
One more important change here is the introduction of TLS sessions cache. It
appears that we weren't benefiting from TLS session resumption mechanism at all,
thank god this is finally fixed.
Finally, AddressToUpstream now supports "h3://" scheme for those who want to try
DoH3 for a particular upstream without enabling it globally. The reasoning for
implementing this custom scheme is the following: currently, only a small share
of public resolvers fully support DoH3. Users may not want to spend time
"probing" every upstream for H3.
commit 8c76e435860699a2d5815fc702b7a7e928eba3ed
Merge: 1145771 1dd831b
Author: Andrey Meshkov <[email protected]>
Date: Fri Sep 16 12:05:34 2022 +0300
Merge branch 'justus-forks-doq-0rtt' into doh3
commit 1145771f7621be5778cf14b47ccfb4aa20d07c81
Author: Andrey Meshkov <[email protected]>
Date: Fri Sep 16 11:45:42 2022 +0300
upstream: initial attempt to add a DOH3 upstream
Merge in DNS/dnsproxy from 2252-better-logging to master
Squashed commit of the following:
commit dd9e03dcfff9a3389334a1e2960561ff35ed89aa
Author: Ainar Garipov <[email protected]>
Date: Mon Nov 9 16:41:14 2020 +0300
* proxy: don't log errors about broken pipes on the info level
Ainar Garipov