package main import ( "errors" "fmt" "strings" "time" "github.com/fangdingjun/go-log" "github.com/miekg/dns" ) type dnsClient interface { Exchange(m *dns.Msg, addr string) (*dns.Msg, time.Duration, error) } type dnsHandler struct { cfg *conf tcpclient dnsClient udpclient dnsClient httpsgoogle dnsClient httpscf dnsClient } func newDNSHandler(cfg *conf) *dnsHandler { return &dnsHandler{ cfg: cfg, tcpclient: &dns.Client{Net: "tcp", Timeout: 8 * time.Second, UDPSize: 4096}, udpclient: &dns.Client{Net: "udp", Timeout: 5 * time.Second, UDPSize: 4096}, httpsgoogle: &GoogleHTTPDns{}, httpscf: &CloudflareHTTPDns{}, } } // ServerDNS implements the dns.Handler interface func (h *dnsHandler) ServeDNS(w dns.ResponseWriter, r *dns.Msg) { domain := r.Question[0].Name if ok := h.answerFromHosts(w, r); ok { return } srvs := h.getUpstreamServer(domain) if srvs == nil { srvs = h.cfg.DefaultUpstream } if msg, err := h.getAnswerFromUpstream(r, srvs); err == nil { w.WriteMsg(msg) return } dns.HandleFailed(w, r) } func (h *dnsHandler) getUpstreamServer(domain string) []addr { for _, srv := range h.cfg.ForwardRules { if ok := srv.domains.has(strings.Trim(domain, ".")); ok { return srv.Server } } return nil } func (h *dnsHandler) queryUpstream(r *dns.Msg, srv addr, ch chan *dns.Msg) { var m *dns.Msg var err error switch srv.Network { case "tcp": log.Debugf("query %s IN %s, forward to %s:%d through tcp", r.Question[0].Name, dns.TypeToString[r.Question[0].Qtype], srv.Host, srv.Port) m, _, err = h.tcpclient.Exchange(r, fmt.Sprintf("%s:%d", srv.Host, srv.Port)) case "udp": log.Debugf("query %s IN %s, forward to %s:%d through udp", r.Question[0].Name, dns.TypeToString[r.Question[0].Qtype], srv.Host, srv.Port) m, _, err = h.udpclient.Exchange(r, fmt.Sprintf("%s:%d", srv.Host, srv.Port)) case "https_google": log.Debugf("query %s IN %s, forward to %s:%d through google https", r.Question[0].Name, dns.TypeToString[r.Question[0].Qtype], srv.Host, srv.Port) m, _, err = h.httpsgoogle.Exchange(r, fmt.Sprintf("%s:%d", srv.Host, srv.Port)) case "https_cloudflare": log.Debugf("query %s IN %s, forward to %s:%d through cloudflare https", r.Question[0].Name, dns.TypeToString[r.Question[0].Qtype], srv.Host, srv.Port) m, _, err = h.httpscf.Exchange(r, srv.Host) default: err = fmt.Errorf("not supported type %s", srv.Network) } if err != nil { log.Errorf("%s", err) return } select { case ch <- m: default: } } func (h *dnsHandler) getAnswerFromUpstream(r *dns.Msg, servers []addr) (*dns.Msg, error) { ch := make(chan *dns.Msg, len(servers)) for _, srv := range servers { go func(a addr) { h.queryUpstream(r, a, ch) }(srv) } var savedErr *dns.Msg for { select { case m := <-ch: if m.Rcode == dns.RcodeSuccess && !h.inBlacklist(m) { return m, nil } savedErr = m case <-time.After(time.Duration(h.cfg.Timeout) * time.Second): if savedErr != nil { return savedErr, nil } log.Debugf("query %s IN %s, timeout", r.Question[0].Name, dns.TypeToString[r.Question[0].Qtype]) return nil, errors.New("timeout") } } } func (h *dnsHandler) inBlacklist(m *dns.Msg) bool { var ip string for _, rr := range m.Answer { if a, ok := rr.(*dns.A); ok { ip = a.A.String() } else if aaaa, ok := rr.(*dns.AAAA); ok { ip = aaaa.AAAA.String() } else { ip = "" } if ip != "" && h.cfg.blacklist.exists(ip) { log.Debugf("%s in blacklist", ip) return true } } return false } func (h *dnsHandler) answerFromHosts(w dns.ResponseWriter, r *dns.Msg) bool { domain := r.Question[0].Name t := r.Question[0].Qtype ip := h.cfg.hosts.get(strings.Trim(domain, "."), int(t)) if ip != "" { rr, _ := dns.NewRR(fmt.Sprintf("%s 3600 IN %s %s", domain, dns.TypeToString[t], ip)) if rr == nil { return false } msg := new(dns.Msg) msg.SetReply(r) msg.Answer = append(msg.Answer, rr) w.WriteMsg(msg) log.Debugf("query %s IN %s, reply from hosts", domain, dns.TypeToString[t]) return true } return false }