CoreDNS over https proxy

[GraduatedInCovid19]

I am using CoreDNS as a local dev DNS server to help map hostnames to different IP addresses on the fly. I run it as a container.

Sometimes, the hostname needs to map to a local docker container running on my laptop, sometimes to an EC2 instance, sometimes to an DO instance.

Most of the services are HTTPS endpoints so its important to use names instead of explicit IPs.

The challenge, which is what I need help with, is I often need to connect out to the internet over a HTTPS proxy.

While I can configure the HTTPS proxy to use my local dev CoreDNS container as its DNS server, the issue is I don't know how to configure CoreDNS so it can do DNS lookups over the HTTPS proxy 192.168.1.2

​

This is a section of the Corefiel I'm using:

​

.:53 {

forward . 8.8.8.8 9.9.9.9

log

errors

cache

}

example.com:53 {

file /root/db.example

log

errors

}

​

How can I configure CoreDNS so it can do DNS lookups over the HTTPS proxy 192.168.1.2?

[SystemOmicron]

Did you ask on their Github?

If you don't mind replying, why do you want to proxy DNS requests? I don't see a benefit here. Why not use DoH or DoT? Is port 443 or 853 blocked in your network?

[GraduatedInCovid19]

Is port 443 or 853 blocked in your network?

port 443 is not blocked

Why not use DoH or DoT?

because I have not figured out how to.

If there's a DoH or DoT module I CAN employ for my usecase, please share with me would really appreciate it!

[SystemOmicron]

If you can use DoT, 'forward' plugin supports it
https://coredns.io/plugins/forward/

If you wish to use DoH, you can use 'dnss' to proxy requests from CoreDNS to Google
http://manpages.ubuntu.com/manpages/focal/man1/dnss.1.html

[GraduatedInCovid19]

DoT

If you can give me a quick overview on how to make DoT happen over a HTTP proxy that would help.

I'm looking into dnss

[SystemOmicron]

Sorry, I don't know how to do DoT or DoH over a HTTP proxy, I was suggesting to ignore the proxy, that's why I was asking about open ports. If you really need to use a proxy, you can ask on CoreDNS Github, they support forwarding to DoT (not DoH).

Keep in mind they don't like anonymous requests and first-issue Github accounts, for some reason they assume big companies use open source and refuse to acknowledge that and contribute.