Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(gateway): update DoH resolver for .crypto DNSLink #782

Merged
merged 3 commits into from
Jan 8, 2025

Conversation

lidel
Copy link
Member

@lidel lidel commented Jan 7, 2025

Ref. https://developers.cloudflare.com/fundamentals/api/reference/deprecations/#2025-07-01:
image

Cloudflare decomissionned their resolver and started redirecting (HTTP 308) to https://dns.eth.link/dns-query which is an alias for eth.limo.

That endpoint does not support resolving DNSLink of .crypto TLD and always returns no results, effectively breaking those DNSLinks for everyone using them with IPFS systems.

This change switches the default implicit DoH resolver of .crypto TLS to one provided by UD project, allowing their community to fix issue without involving a third-party.

Allows UD community to fix resolution themselves – see #772

Cloudflare decomissionned their resolver and started redirecting
(HTTP 308) to https://dns.eth.link/dns-query which is an alias for
eth.limo.

That endpoint does not support resolving DNSLink of .crypto TLD and
always returns no results.

This change switched to DoH resolver provided by UD project.

Closes #772
@lidel lidel requested a review from aschmahmann January 7, 2025 15:19
@lidel lidel changed the title fix(gateway): update DoH resolver for .crypto TLD fix(gateway): update DoH resolver for .crypto DNSLink Jan 7, 2025
Copy link

codecov bot commented Jan 7, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 60.54%. Comparing base (5518e1a) to head (405fe8c).
Report is 1 commits behind head on main.

Impacted file tree graph

@@            Coverage Diff             @@
##             main     #782      +/-   ##
==========================================
+ Coverage   60.44%   60.54%   +0.09%     
==========================================
  Files         245      245              
  Lines       31133    31133              
==========================================
+ Hits        18818    18848      +30     
+ Misses      10638    10615      -23     
+ Partials     1677     1670       -7     
Files with missing lines Coverage Δ
gateway/dns.go 37.77% <ø> (ø)

... and 10 files with indirect coverage changes

lidel added a commit to ipfs/kubo that referenced this pull request Jan 7, 2025
@lidel lidel marked this pull request as ready for review January 8, 2025 19:54
@lidel lidel requested a review from a team as a code owner January 8, 2025 19:54
Copy link
Member Author

@lidel lidel left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

CI is green, merging to make the source of UD issues more obvious to users trying to resolve .crypto.

This is provisional fix on our end to allow UD community to fix resolution themselves.
We will keep this status quo for 3-6 months – the future of implicit resolver will be discussed in #772 (comment)

@lidel lidel merged commit 08526ad into main Jan 8, 2025
18 checks passed
@lidel lidel deleted the fix/doh-crypto-tld branch January 8, 2025 20:23
lidel added a commit to ipfs/kubo that referenced this pull request Jan 14, 2025
lidel added a commit to ipfs/kubo that referenced this pull request Jan 14, 2025
* fix(dns): update default DNSLink resolvers

Depends on
- ipfs/boxo#781
- ipfs/boxo#782

* chore: latest boxo main and go-doh-resolver v0.5.0

makes error message better, informing which URL failled

* chore: p2p-forge v0.2.1+

this removes acmez/v2 and fixes go vet

* chore: latest boxo with DoH fixes

commit from main branch that includes:
ipfs/boxo#645
ipfs/boxo#782
ipfs/boxo#781
lidel added a commit to ipfs/kubo that referenced this pull request Jan 14, 2025
* fix(dns): update default DNSLink resolvers

Depends on
- ipfs/boxo#781
- ipfs/boxo#782

* chore: latest boxo main and go-doh-resolver v0.5.0

makes error message better, informing which URL failled

* chore: p2p-forge v0.2.1+

this removes acmez/v2 and fixes go vet

* chore: latest boxo with DoH fixes

commit from main branch that includes:
ipfs/boxo#645
ipfs/boxo#782
ipfs/boxo#781

(cherry picked from commit b021a00)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants