Technitium DNS, DoH

0. Основная Вопросы новичков
1

Добрый всем.
Кто о чем а я о dns.
Кто юзал Technitium DNS сервер, интересно подключение к нему по DoH, поделитесь секретом, как вы этот DoH подняли. Сервер стоит на vds, по 53 порту сделал подключение, 443 порт никак не дается.

Благодарю

2

А не занят ли случаем 443 порт кем то другим?

И в логах посмотреть куда прибиндилось

[2026-03-04 10:07:36 UTC] [[::]:53] [UDP] DNS Server was bound successfully.
[2026-03-04 10:07:36 UTC] [[::]:53] [TCP] DNS Server was bound successfully.
[2026-03-04 10:07:36 UTC] [[::]:853] [TLS] DNS Server was bound successfully.

Если у вас порт занят кем то другим, например nginx то в логах увидите

[2026-03-04 10:22:54 UTC] [[::1]:443] [HTTPS] DNS Server failed to bind.
3 
[2026-03-04 11:34:29 UTC] Attempting to restart DNS service.
[2026-03-04 11:34:29 UTC] [0.0.0.0:53] [UDP] DNS Server was bound successfully.
[2026-03-04 11:34:29 UTC] [0.0.0.0:53] [TCP] DNS Server was bound successfully.
[2026-03-04 11:34:29 UTC] [0.0.0.0:853] [TLS] DNS Server was bound successfully.
[2026-03-04 11:34:29 UTC] [0.0.0.0:853] [QUIC] DNS Server was bound successfully.
[2026-03-04 11:34:29 UTC] [[::]:53] [UDP] DNS Server was bound successfully.
[2026-03-04 11:34:29 UTC] [[::]:53] [TCP] DNS Server was bound successfully.
[2026-03-04 11:34:29 UTC] [[::]:853] [TLS] DNS Server was bound successfully.
[2026-03-04 11:34:29 UTC] [[::]:853] [QUIC] DNS Server was bound successfully.
[2026-03-04 11:34:29 UTC] [[::]:443] [HTTPS] DNS Server was bound successfully.
[2026-03-04 11:34:29 UTC] DNS service was restarted successfully.
4

Technitium установлен на ubuntu server 24.04 в докере, более на сервере ничего нет.

5

А сам DOH включен и настроен?

image
image1204×1429 289 KB

6

Да. И сертификат получен.

image
image864×826 61 KB

7

image
image1177×647 53.3 KB

8

Этот же сертификат используется для https web морды сервера. Все работает.

9

2026-03-04_20-58-39
2026-03-04_20-58-39999×142 23 KB

А вот тут у вас что?

И собственно у хост машины то 443 порт в куда смотрит?

10

image
image613×162 6.84 KB

Плиз, как проверить: хост машины то 443 порт в куда смотрит?

11

Ну например так

netstat -tulnp

Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.53:53 0.0.0.0:* LISTEN 113/systemd-resolve
tcp 0 0 192.168.1.111:53 0.0.0.0:* LISTEN 105/dotnet
tcp 0 0 192.168.1.111:853 0.0.0.0:* LISTEN 105/dotnet
tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN 143/nginx: master p
udp 0 0 192.168.1.111:53 0.0.0.0:* 105/dotnet
udp 0 0 127.0.0.53:53 0.0.0.0:* 113/systemd-resolve
udp 0 0 0.0.0.0:67 0.0.0.0:* 105/dotnet
udp 0 0 192.168.1.111:67 0.0.0.0:* 105/dotnet
udp 0 0 0.0.0.0:443 0.0.0.0:* 143/nginx: master p

Смотри 443 порт кто занимает и на каком интерфейсе.

12

root@dns-server:~# netstat -tulnp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 177961/docker-proxy
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1/systemd
tcp 0 0 0.0.0.0:53 0.0.0.0:* LISTEN 177926/docker-proxy
tcp 0 0 0.0.0.0:53443 0.0.0.0:* LISTEN 178014/docker-proxy
tcp 0 0 0.0.0.0:5380 0.0.0.0:* LISTEN 177996/docker-proxy
tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN 177978/docker-proxy
tcp6 0 0 :::80 :::* LISTEN 177966/docker-proxy
tcp6 0 0 :::22 :::* LISTEN 1/systemd
tcp6 0 0 :::53 :::* LISTEN 177930/docker-proxy
tcp6 0 0 :::53443 :::* LISTEN 178019/docker-proxy
tcp6 0 0 :::5380 :::* LISTEN 178000/docker-proxy
tcp6 0 0 :::443 :::* LISTEN 177983/docker-proxy
udp 0 0 0.0.0.0:53 0.0.0.0:* 177943/docker-proxy
udp 0 0 157.22.230.68:68 0.0.0.0:* 11126/systemd-netwo
udp6 0 0 :::53 :::* 177948/docker-proxy

[2026-03-05 23:51:22 UTC] [0.0.0.0:53] [UDP] DNS Server was bound successfully.
[2026-03-05 23:51:22 UTC] [0.0.0.0:53] [TCP] DNS Server was bound successfully.
[2026-03-05 23:51:22 UTC] [0.0.0.0:443] [UDP] DNS Server was bound successfully.
[2026-03-05 23:51:22 UTC] [0.0.0.0:443] [TCP] DNS Server was bound successfully.
[2026-03-05 23:51:22 UTC] [[::]:53] [UDP] DNS Server was bound successfully.
[2026-03-05 23:51:22 UTC] [[::]:53] [TCP] DNS Server was bound successfully.
[2026-03-05 23:51:22 UTC] [[::]:443] [HTTPS] DNS Server failed to bind.