enhanced privacy

[wft44maqb]

serverless-dns/wrangler.toml

Line 9 in 08cf14a

vars = { CF_CACHE_EXPIRY_DAYS = 1, CF_CONFIG_CMS_KEY = "", CF_INFO_CMS_KEY = "", CF_USER_CMS_CACHE_TIME = 0, CF_USER_CMS_TOSS_TIME = 0, CF_LOG_FIREHOSE_STREAM = "", CF_DEBUG_FIREHOSE_STREAM = "", CF_DNSCOUNT_FIREHOSE_STREAM = "", CF_DNSLOG_WAIT_TIME = 10000, CF_DNSCOUNT_WAIT_TIME = 15000, CF_LIVELOG_END_POINT = "", CF_USER_CONFIG_CACHE_TIME = 300000, CF_BLOCKLIST_URL = "https://bravepublic.s3.us-east-2.amazonaws.com/completeblocklist/", CF_LATEST_BLOCKLIST_TIMESTAMP = "1627901743446", CF_PROCESS_DNS_ON_DNSPARSER_EXCEPTION = false, CF_PROCESS_DNS_ON_SERVER_EXCEPTION = false, CF_ON_INVALID_FLAG_STOPPROCESSING = true, CF_DNS_RESOLVER_URL = "https://cloudflare-dns.com/dns-query"}

https://cloudflare-dns.com/dns-query→https://mozilla.cloudflare-dns.com/dns-query

[wft44maqb]

then you can now enable the edns_client_subnet function~ ?

[ignoramous]

Interesting. We could consider switching to Cloudflare's endpoint for Mozilla if we know for sure that Cloudflare would not block requests coming from non-Mozilla software.

Re: EDNS Client Subnet (ECS): RethinkDNS does not support it because the upstream resolver it uses (Cloudflare 1⁴) does not: See #9

Adding support for resolvers that do (like Quad9 9⁴ or Google 8⁴), is one way forward to enable ECS.

[wft44maqb]

Re: EDNS Client Subnet (ECS): RethinkDNS does not support it because the upstream resolver it uses (Cloudflare 1⁴) does not: See #9 By adding support for resolvers that do (like Quad9 9⁴ or Google 8⁴), is one way to enabling ECS.

o...ic..

[ignoramous]

@wft44maqb I take there is nothing to do for us here since it isn't clear if Cloudflare welcomes traffic from non-Mozilla software. Do you happen to have any references in this regard?

[wft44maqb]

@wft44maqb I take there is nothing to do for us here since it isn't clear if Cloudflare welcomes traffic from non-Mozilla software. Do you happen to have any references in this regard?

I have used it for more than a month and it works fine...

[wft44maqb]

I hope it can support ECS because I want to use NextDNS, which is also a member of the TRR program

https://wiki.mozilla.org/Trusted_Recursive_Resolver

[ignoramous]

You can use NextDNS with the app today. With the resolver, we would add support for it in the coming months with #9

[ignoramous]

We now support a secondary upstream doh resolver: CF_DNS_RESOLVER_URL_2 33e9107 Defaults to https://dns.google/dns-query

Current impl forwards a user-query to two upstreams now (primary viz. CF_DNS_RESOLVER_URL and secondary viz. CF_DNS_RESOLVER_URL_2) and returns back the results from whichever upstream responds back the fastest (borrowing a technique from The Tail at Scale ;)