diff options
| author | Shulhan <ms@kilabit.info> | 2026-03-26 05:57:47 +0700 |
|---|---|---|
| committer | Shulhan <ms@kilabit.info> | 2026-03-26 05:59:26 +0700 |
| commit | 06e602df04fe8f8c96505993b7f5c48527f83d63 (patch) | |
| tree | f1624476efbcfde12d8d7266721f23b402eb8e74 /testdata/rescached.cfg.test.out | |
| parent | ce1c579b5db1a51a8e7e1f36c09a4cddb378ebc8 (diff) | |
| download | rescached-06e602df04fe8f8c96505993b7f5c48527f83d63.tar.xz | |
Using port makes the IP address of DoT and DoH listen on the same
address with UDP.
If we set ListenAddress to 0.0.0.0 and TLS termination is handled
by proxy, this cause DoT and DoH will also listen on all
addresses.
This behaviour makes the server open DoT and DoH ports to the public,
where it should be on local address only.
Diffstat (limited to 'testdata/rescached.cfg.test.out')
| -rw-r--r-- | testdata/rescached.cfg.test.out | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/testdata/rescached.cfg.test.out b/testdata/rescached.cfg.test.out index a901f0b..fb6ed61 100644 --- a/testdata/rescached.cfg.test.out +++ b/testdata/rescached.cfg.test.out @@ -22,6 +22,8 @@ url = http://someurl [dns "server"] listen = 127.0.0.1:5350 +doh.listen = +dot.listen = tls.certificate = tls.private_key = parent = udp://10.8.0.1 @@ -29,7 +31,5 @@ http.idle_timeout = 0s cache.prune_delay = 0s cache.prune_threshold = 0s debug = 0 -http.port = 0 -tls.port = 0 tls.allow_insecure = true doh.behind_proxy = false |