{"id":476908,"date":"2023-08-09T09:05:02","date_gmt":"2023-08-09T09:05:02","guid":{"rendered":""},"modified":"2023-09-05T11:13:39","modified_gmt":"2023-09-05T11:13:39","slug":"dns-over-https","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/cn\/wiki\/dns-over-https\/","title":{"rendered":"\u901a\u8fc7 HTTPS \u8fdb\u884c DNS"},"content":{"rendered":"

DNS over HTTPS (DoH) \u662f\u4e00\u79cd\u7ed3\u5408\u4e86\u57df\u540d\u7cfb\u7edf (DNS) \u548c\u5b89\u5168\u8d85\u6587\u672c\u4f20\u8f93\u534f\u8bae (HTTPS) \u7684\u534f\u8bae\uff0c\u63d0\u4f9b\u4e00\u79cd\u66f4\u79c1\u5bc6\u3001\u66f4\u5b89\u5168\u7684\u65b9\u5f0f\u5c06\u57df\u540d\u89e3\u6790\u4e3a IP \u5730\u5740\u3002\u5b83\u5bf9 HTTPS \u5185\u7684 DNS \u67e5\u8be2\u548c\u54cd\u5e94\u8fdb\u884c\u52a0\u5bc6\uff0c\u4fdd\u62a4\u7528\u6237\u6570\u636e\u514d\u906d\u7a83\u542c\u548c\u64cd\u7eb5\uff0c\u5e76\u786e\u4fdd ISP \u548c\u5176\u4ed6\u4e2d\u4ecb\u673a\u6784\u65e0\u6cd5\u76d1\u63a7\u6216\u7be1\u6539 DNS \u6d41\u91cf\u3002<\/p>\n

DNS over HTTPS \u7684\u8d77\u6e90\u5386\u53f2\u53ca\u5176\u9996\u6b21\u63d0\u53ca<\/h2>\n

DNS over HTTPS \u6700\u521d\u7531 Mozilla \u548c Cloudflare \u7684\u5de5\u7a0b\u5e08\u4e8e 2017 \u5e74 10 \u6708\u63d0\u51fa\uff0c\u65e8\u5728\u89e3\u51b3\u4e0e\u4f20\u7edf DNS \u89e3\u6790\u76f8\u5173\u7684\u5b89\u5168\u548c\u9690\u79c1\u95ee\u9898\u3002\u8be5\u534f\u8bae\u65e8\u5728\u9632\u6b62\u4e92\u8054\u7f51\u670d\u52a1\u63d0\u4f9b\u5546 (ISP)\u3001\u653f\u5e9c\u6216\u6076\u610f\u884c\u4e3a\u8005\u76d1\u89c6\u7528\u6237\u7684 DNS \u67e5\u8be2\uff0c\u8fd9\u53ef\u80fd\u4f1a\u6cc4\u9732\u4ed6\u4eec\u7684\u4e92\u8054\u7f51\u6d3b\u52a8\u5e76\u53ef\u80fd\u5bfc\u81f4\u9690\u79c1\u4fb5\u72af\u3002<\/p>\n

\u6709\u5173 HTTPS \u4e0a\u7684 DNS \u7684\u8be6\u7ec6\u4fe1\u606f\u3002\u6269\u5c55\u4e3b\u9898 DNS over HTTPS<\/h2>\n

DNS over HTTPS \u7684\u8fd0\u4f5c\u65b9\u5f0f\u662f\u5c06 DNS \u67e5\u8be2\u548c\u54cd\u5e94\u5305\u88c5\u5728 HTTPS \u6570\u636e\u5305\u4e2d\uff0c\u8fd9\u4e9b\u6570\u636e\u5305\u4f7f\u7528\u4f20\u8f93\u5c42\u5b89\u5168\u6027 (TLS) \u8fdb\u884c\u52a0\u5bc6\u548c\u8eab\u4efd\u9a8c\u8bc1\u3002\u8fd9\u79cd\u52a0\u5bc6\u53ef\u786e\u4fdd\u53ea\u6709\u76ee\u6807\u65b9\u624d\u80fd\u89e3\u5bc6\u5185\u5bb9\uff0c\u4ece\u800c\u4fdd\u62a4\u5176\u514d\u906d\u62e6\u622a\u548c\u4fee\u6539\u3002<\/p>\n

\u5f53\u7528\u6237\u7684\u8bbe\u5907\u60f3\u8981\u89e3\u6790\u57df\u540d\u65f6\uff08\u4f8b\u5982\uff0c www.example.com<\/a>\uff09\u5230\u5176\u76f8\u5e94\u7684IP\u5730\u5740\uff0c\u5b83\u5411DNS\u670d\u52a1\u5668\u53d1\u9001DNS\u67e5\u8be2\u3002\u901a\u8fc7 DoH\uff0c\u8bbe\u5907\u4e0d\u518d\u4f7f\u7528\u4f20\u7edf\u7684 UDP \u6216 TCP \u7aef\u53e3\u8fdb\u884c DNS\uff0c\u800c\u662f\u901a\u8fc7\u7aef\u53e3 443\uff08HTTPS \u6d41\u91cf\u7684\u6807\u51c6\u7aef\u53e3\uff09\u53d1\u9001 DNS \u67e5\u8be2\u3002\u7136\u540e\uff0cDNS \u67e5\u8be2\u5c06\u8f6c\u53d1\u5230\u652f\u6301 DoH \u7684 DNS \u670d\u52a1\u5668\u3002<\/p>\n

DNS \u670d\u52a1\u5668\u901a\u8fc7 HTTPS \u53d1\u56de DNS \u54cd\u5e94\u6765\u8fdb\u884c\u54cd\u5e94\uff0c\u4ece\u800c\u5b8c\u6210\u52a0\u5bc6\u5faa\u73af\u3002\u8bbe\u5907\u89e3\u5bc6\u54cd\u5e94\u5e76\u83b7\u53d6\u8bbf\u95ee\u6240\u9700\u7f51\u7ad9\u6240\u9700\u7684 IP \u5730\u5740\u3002<\/p>\n

DNS over HTTPS \u7684\u5185\u90e8\u7ed3\u6784\u3002DNS over HTTPS \u7684\u5de5\u4f5c\u539f\u7406<\/h2>\n

DNS over HTTPS \u7684\u5185\u90e8\u7ed3\u6784\u53ef\u5206\u4e3a\u4e09\u4e2a\u4e3b\u8981\u7ec4\u6210\u90e8\u5206\uff1a<\/p>\n

    \n
  1. \n

    \u5ba2\u6237<\/strong>\uff1a\u5ba2\u6237\u7aef\u662f\u6307\u53d1\u8d77DNS\u89e3\u6790\u8fc7\u7a0b\u7684\u7528\u6237\u8bbe\u5907\u6216\u5e94\u7528\u7a0b\u5e8f\u3002\u5f53\u5ba2\u6237\u7aef\u60f3\u8981\u89e3\u6790\u57df\u540d\u65f6\uff0c\u5b83\u4f1a\u751f\u6210 DNS \u67e5\u8be2\u5e76\u901a\u8fc7 HTTPS \u8fde\u63a5\u53d1\u9001\u3002<\/p>\n<\/li>\n

  2. \n

    DNS-over-HTTPS \u89e3\u6790\u5668<\/strong>\uff1a\u8be5\u7ec4\u4ef6\u901a\u8fc7 HTTPS \u63a5\u6536\u5ba2\u6237\u7aef\u7684 DNS \u67e5\u8be2\u3002\u5b83\u5145\u5f53\u5ba2\u6237\u7aef\u548c DNS \u670d\u52a1\u5668\u4e4b\u95f4\u7684\u4e2d\u4ecb\uff0c\u5904\u7406 DNS \u6d41\u91cf\u7684\u52a0\u5bc6\u548c\u89e3\u5bc6\u3002\u89e3\u6790\u5668\u8d1f\u8d23\u5c06 DNS \u67e5\u8be2\u8f6c\u53d1\u5230 DNS \u670d\u52a1\u5668\u5e76\u5c06\u52a0\u5bc6\u7684\u54cd\u5e94\u8fd4\u56de\u7ed9\u5ba2\u6237\u7aef\u3002<\/p>\n<\/li>\n

  3. \n

    DNS\u670d\u52a1\u5668<\/strong>\uff1aDNS \u670d\u52a1\u5668\u5904\u7406 DNS \u67e5\u8be2\u5e76\u5c06\u76f8\u5e94\u7684 DNS \u54cd\u5e94\u8fd4\u56de\u7ed9 DNS-over-HTTPS \u89e3\u6790\u5668\uff0cDNS-over-HTTPS \u89e3\u6790\u5668\u53c8\u5bf9\u5176\u8fdb\u884c\u52a0\u5bc6\u5e76\u5c06\u5176\u53d1\u9001\u56de\u5ba2\u6237\u7aef\u3002<\/p>\n<\/li>\n<\/ol>\n

    \u8be5\u8fc7\u7a0b\u53ef\u786e\u4fdd DNS \u67e5\u8be2\u548c\u54cd\u5e94\u514d\u53d7\u672a\u7ecf\u6388\u6743\u7684\u8bbf\u95ee\u548c\u64cd\u7eb5\u3002<\/p>\n

    DNS over HTTPS\u7684\u5173\u952e\u7279\u6027\u5206\u6790<\/h2>\n

    DNS over HTTPS \u63d0\u4f9b\u4e86\u51e0\u4e2a\u589e\u5f3a\u9690\u79c1\u548c\u5b89\u5168\u6027\u7684\u5173\u952e\u529f\u80fd\uff1a<\/p>\n

      \n
    1. \n

      \u52a0\u5bc6<\/strong>\uff1aDNS \u67e5\u8be2\u548c\u54cd\u5e94\u4f7f\u7528 TLS \u52a0\u5bc6\uff0c\u9632\u6b62\u7a83\u542c\u8005\u62e6\u622a\u548c\u7834\u8bd1 DNS \u6d41\u91cf\u3002<\/p>\n<\/li>\n

    2. \n

      \u771f\u5b9e\u6027<\/strong>\uff1aTLS \u8fd8\u63d0\u4f9b\u8eab\u4efd\u9a8c\u8bc1\uff0c\u786e\u4fdd\u5ba2\u6237\u7aef\u4e0e\u5408\u6cd5\u7684 DNS \u670d\u52a1\u5668\u901a\u4fe1\uff0c\u800c\u4e0d\u662f\u8bd5\u56fe\u8fdb\u884c\u4e2d\u95f4\u4eba\u653b\u51fb\u7684\u5192\u540d\u9876\u66ff\u8005\u3002<\/p>\n<\/li>\n

    3. \n

      \u9690\u79c1<\/strong>\uff1a\u4f20\u7edf DNS \u89e3\u6790\u4ee5\u660e\u6587\u5f62\u5f0f\u53d1\u9001\u67e5\u8be2\uff0c\u6cc4\u9732\u7528\u6237\u7684\u6d4f\u89c8\u4e60\u60ef\u3002\u4f7f\u7528 DoH\uff0cISP \u548c\u5176\u4ed6\u4e2d\u4ecb\u673a\u6784\u65e0\u6cd5\u76d1\u63a7\u7528\u6237\u7684 DNS \u6d41\u91cf\u3002<\/p>\n<\/li>\n

    4. \n

      \u5b89\u5168<\/strong>\uff1a\u901a\u8fc7\u5bf9 DNS \u8fdb\u884c\u52a0\u5bc6\uff0cDoH \u53ef\u4ee5\u9632\u6b62 DNS \u6b3a\u9a97\u548c\u7f13\u5b58\u4e2d\u6bd2\u653b\u51fb\uff0c\u4ece\u800c\u589e\u5f3a DNS \u89e3\u6790\u7684\u6574\u4f53\u5b89\u5168\u6027\u3002<\/p>\n<\/li>\n

    5. \n

      \u4e0d\u53d7\u9650\u5236\u7684\u8bbf\u95ee<\/strong>\uff1a\u67d0\u4e9b\u7f51\u7edc\u6216\u5730\u533a\u53ef\u80fd\u4f1a\u5bf9 DNS \u6d41\u91cf\u65bd\u52a0\u9650\u5236\uff0c\u4f46\u7531\u4e8e DoH \u4f7f\u7528\u6807\u51c6 HTTPS \u7aef\u53e3 (443)\uff0c\u56e0\u6b64\u5b83\u53ef\u4ee5\u7ed5\u8fc7\u8fd9\u4e9b\u9650\u5236\u3002<\/p>\n<\/li>\n

    6. \n

      \u63d0\u9ad8\u6027\u80fd<\/strong>\uff1aDoH \u53ef\u4ee5\u5229\u7528 DNS-over-HTTPS \u63d0\u4f9b\u5546\u4f7f\u7528\u7684\u4f18\u5316\u5185\u5bb9\u4ea4\u4ed8\u7f51\u7edc (CDN) \u57fa\u7840\u8bbe\u65bd\u6765\u6f5c\u5728\u5730\u63d0\u9ad8 DNS \u89e3\u6790\u6027\u80fd\u3002<\/p>\n<\/li>\n<\/ol>\n

      HTTPS \u4e0a\u7684 DNS \u7c7b\u578b<\/h2>\n

      DNS over HTTPS \u5b9e\u73b0\u6709\u4e24\u79cd\u4e3b\u8981\u7c7b\u578b\uff1a<\/p>\n

        \n
      1. \n

        \u57fa\u4e8e HTTPS \u7684\u516c\u5171 DNS \u670d\u52a1<\/strong>\uff1a\u8fd9\u4e9b\u662f\u7531\u516c\u53f8\u6216\u7ec4\u7ec7\u63d0\u4f9b\u7684\u7b2c\u4e09\u65b9 DNS-over-HTTPS \u89e3\u6790\u5668\u3002\u793a\u4f8b\u5305\u62ec Cloudflare\u3001Google \u548c Quad9\u3002\u7528\u6237\u53ef\u4ee5\u914d\u7f6e\u5176\u8bbe\u5907\u6216\u5e94\u7528\u7a0b\u5e8f\u4ee5\u4f7f\u7528\u8fd9\u4e9b\u516c\u5171 DoH \u670d\u52a1\uff0c\u786e\u4fdd\u52a0\u5bc6\u7684 DNS \u89e3\u6790\u3002<\/p>\n<\/li>\n

      2. \n

        HTTPS \u670d\u52a1\u5668\u4e0a\u7684\u79c1\u6709 DNS<\/strong>\uff1a\u9664\u4e86\u4f7f\u7528\u516c\u5171 DoH \u670d\u52a1\u5916\uff0c\u7528\u6237\u8fd8\u53ef\u4ee5\u8bbe\u7f6e\u81ea\u5df1\u7684\u79c1\u6709 DoH \u670d\u52a1\u5668\u6765\u5904\u7406\u81ea\u5df1\u7f51\u7edc\u7684 DNS \u89e3\u6790\u3002\u6b64\u9009\u9879\u63d0\u4f9b\u66f4\u591a\u63a7\u5236\u548c\u9690\u79c1\uff0c\u56e0\u4e3a DNS \u67e5\u8be2\u4e0d\u901a\u8fc7\u7b2c\u4e09\u65b9\u670d\u52a1\u5668\u8def\u7531\u3002<\/p>\n<\/li>\n<\/ol>\n

        \u4ee5\u4e0b\u662f\u4e00\u4e9b\u6d41\u884c\u7684\u516c\u5171 DNS over HTTPS \u63d0\u4f9b\u5546\u7684\u6bd4\u8f83\u8868\uff1a<\/p>\n\n\n\n\n\n\n\n\n
        \u63d0\u4f9b\u5546<\/th>\nIP\u5730\u5740<\/th>\n\u9690\u79c1\u653f\u7b56<\/th>\n\u7279\u5f81<\/th>\n<\/tr>\n<\/thead>\n
        \u4e91\u8000<\/td>\n1.1.1.1, 1.0.0.1<\/td>\n\u9690\u79c1\u7b2c\u4e00 DNS \u89e3\u6790\u5668<\/td>\n\u6076\u610f\u8f6f\u4ef6\u548c\u7f51\u7edc\u9493\u9c7c\u9632\u62a4<\/td>\n<\/tr>\n
        \u8c37\u6b4c<\/td>\n8.8.8.8, 8.8.4.4<\/td>\n\u8c37\u6b4c\u516c\u5171 DNS<\/td>\n\u5b89\u5168\u6d4f\u89c8\u548c DNSSEC \u652f\u6301<\/td>\n<\/tr>\n
        \u56db\u65b99<\/td>\n9.9.9.9<\/td>\n\u9690\u79c1\u548c\u5b89\u5168<\/td>\n\u8fc7\u6ee4\u6076\u610f\u57df<\/td>\n<\/tr>\n
        \u5f00\u653eDNS<\/td>\n208.67.222.222<\/td>\n\u601d\u79d1\u4fdd\u62a4\u4f1e<\/td>\n\u53ef\u5b9a\u5236\u7684\u5185\u5bb9\u8fc7\u6ee4<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

        DNS over HTTPS \u7684\u4f7f\u7528\u65b9\u6cd5\u3001\u95ee\u9898\u4ee5\u53ca\u4e0e\u4f7f\u7528\u76f8\u5173\u7684\u89e3\u51b3\u65b9\u6848<\/h2>\n

        \u7528\u6237\u53ef\u4ee5\u901a\u8fc7\u914d\u7f6e DNS \u89e3\u6790\u5668\u8bbe\u7f6e\u5728\u5176\u8bbe\u5907\u6216\u5e94\u7528\u7a0b\u5e8f\u4e0a\u542f\u7528 DNS over HTTPS\u3002\u8bb8\u591a\u73b0\u4ee3\u7f51\u7edc\u6d4f\u89c8\u5668\u8fd8\u539f\u751f\u652f\u6301 DoH\uff0c\u4f7f\u7528\u6237\u53ef\u4ee5\u8f7b\u677e\u9009\u62e9\u52a0\u5bc6\u7684 DNS \u89e3\u6790\u3002<\/p>\n

        \u7136\u800c\uff0c\u91c7\u7528 DNS over HTTPS \u5b58\u5728\u4e00\u4e9b\u6311\u6218\uff1a<\/p>\n

          \n
        1. \n

          \u517c\u5bb9\u6027<\/strong>\uff1a\u5e76\u975e\u6240\u6709 DNS \u670d\u52a1\u5668\u90fd\u652f\u6301 DoH\uff0c\u56e0\u6b64\u4f7f\u7528 DNS over HTTPS \u65f6\u67d0\u4e9b\u57df\u540d\u53ef\u80fd\u65e0\u6cd5\u6b63\u786e\u89e3\u6790\u3002\u4e0d\u8fc7\uff0c\u517c\u5bb9 DoH \u7684 DNS \u670d\u52a1\u5668\u6570\u91cf\u6b63\u5728\u589e\u52a0\u3002<\/p>\n<\/li>\n

        2. \n

          \u90e8\u7f72<\/strong>\uff1a\u5bf9\u4e8e\u79c1\u4eba DoH \u670d\u52a1\u5668\uff0c\u8bbe\u7f6e\u548c\u7ef4\u62a4\u57fa\u7840\u8bbe\u65bd\u53ef\u80fd\u9700\u8981\u6280\u672f\u4e13\u4e1a\u77e5\u8bc6\u3002<\/p>\n<\/li>\n

        3. \n

          \u5ba1\u67e5\u548c\u76d1\u63a7<\/strong>\uff1aDoH \u5728\u589e\u5f3a\u9690\u79c1\u7684\u540c\u65f6\uff0c\u4e5f\u53ef\u4ee5\u7528\u6765\u7ed5\u8fc7\u5185\u5bb9\u8fc7\u6ee4\u548c\u5ba1\u67e5\u63aa\u65bd\uff0c\u8fd9\u5f15\u8d77\u4e86\u4e00\u4e9b\u653f\u5e9c\u548c\u7f51\u7edc\u7ba1\u7406\u5458\u7684\u62c5\u5fe7\u3002<\/p>\n<\/li>\n<\/ol>\n

          \u4e3a\u4e86\u5e94\u5bf9\u8fd9\u4e9b\u6311\u6218\uff0c\u5fc5\u987b\u62e5\u6709\u5404\u79cd\u57fa\u4e8e HTTPS \u7684\u516c\u5171 DNS \u63d0\u4f9b\u5546\uff0c\u5e76\u4fc3\u8fdb DNS \u8fd0\u8425\u5546\u91c7\u7528 DoH\u3002<\/p>\n

          \u4e3b\u8981\u7279\u70b9\u53ca\u4e0e\u540c\u7c7b\u672f\u8bed\u7684\u5176\u4ed6\u6bd4\u8f83<\/h2>\n

          \u8ba9\u6211\u4eec\u5c06 HTTPS \u4e0a\u7684 DNS \u4e0e\u4e00\u4e9b\u7c7b\u4f3c\u672f\u8bed\u8fdb\u884c\u6bd4\u8f83\uff1a<\/p>\n

            \n
          1. \n

            \u57fa\u4e8e TLS \u7684 DNS (DoT)<\/strong>\uff1a\u4e0e DoH \u7c7b\u4f3c\uff0cDNS over TLS \u5bf9 DNS \u6d41\u91cf\u8fdb\u884c\u52a0\u5bc6\uff0c\u4f46\u5b83\u4f7f\u7528 TLS\uff0c\u800c\u4e0d\u4f7f\u7528 HTTP \u5c42\u3002\u8fd9\u4e24\u79cd\u534f\u8bae\u90fd\u65e8\u5728\u5b9e\u73b0\u52a0\u5bc6 DNS \u7684\u76f8\u540c\u76ee\u6807\uff0c\u4f46 DoH \u7531\u4e8e\u4f7f\u7528\u6807\u51c6 HTTPS \u7aef\u53e3\uff0c\u56e0\u6b64\u5bf9\u9632\u706b\u5899\u66f4\u52a0\u53cb\u597d\u3002<\/p>\n<\/li>\n

          2. \n

            VPN\uff08\u865a\u62df\u4e13\u7528\u7f51\u7edc\uff09<\/strong>\uff1aVPN \u8fd8\u4f1a\u52a0\u5bc6\u4e92\u8054\u7f51\u6d41\u91cf\uff0c\u5305\u62ec DNS \u67e5\u8be2\uff0c\u4f46\u5b83\u4eec\u5728\u4e0d\u540c\u7684\u5c42\u4e0a\u8fd0\u884c\u3002VPN \u4f1a\u52a0\u5bc6\u7528\u6237\u8bbe\u5907\u4e0e VPN \u670d\u52a1\u5668\u4e4b\u95f4\u7684\u6240\u6709\u6d41\u91cf\uff0c\u800c DoH \u4ec5\u52a0\u5bc6\u5ba2\u6237\u7aef\u4e0e DNS-over-HTTPS \u89e3\u6790\u5668\u4e4b\u95f4\u7684 DNS \u6d41\u91cf\u3002<\/p>\n<\/li>\n

          3. \n

            DNSSEC\uff08DNS \u5b89\u5168\u6269\u5c55\uff09<\/strong>\uff1aDNSSEC \u662f DNS \u7684\u4e00\u9879\u5b89\u5168\u529f\u80fd\uff0c\u53ef\u63d0\u4f9b\u6570\u636e\u5b8c\u6574\u6027\u548c\u8eab\u4efd\u9a8c\u8bc1\u3002\u867d\u7136 DNSSEC \u548c DoH \u53ef\u4ee5\u4e00\u8d77\u4f7f\u7528\u6765\u589e\u5f3a\u5b89\u5168\u6027\uff0c\u4f46\u5b83\u4eec\u6709\u4e0d\u540c\u7684\u7528\u9014\u3002 DNSSEC \u53ef\u9632\u6b62 DNS \u6570\u636e\u7be1\u6539\uff0c\u800c DoH \u53ef\u4fdd\u62a4 DNS \u6d41\u91cf\u514d\u906d\u7a83\u542c\u548c\u76d1\u63a7\u3002<\/p>\n<\/li>\n<\/ol>\n

            \u4e0e HTTPS \u4e0a\u7684 DNS \u76f8\u5173\u7684\u672a\u6765\u524d\u666f\u548c\u6280\u672f<\/h2>\n

            \u8fd1\u5e74\u6765\uff0c\u57fa\u4e8e HTTPS \u7684 DNS \u83b7\u5f97\u4e86\u5de8\u5927\u7684\u5173\u6ce8\uff0c\u5176\u672a\u6765\u770b\u8d77\u6765\u5145\u6ee1\u5e0c\u671b\u3002\u968f\u7740\u8d8a\u6765\u8d8a\u591a\u7684\u7528\u6237\u548c\u7ec4\u7ec7\u4f18\u5148\u8003\u8651\u5728\u7ebf\u9690\u79c1\uff0cDoH \u5f88\u53ef\u80fd\u6210\u4e3a\u73b0\u4ee3\u6d4f\u89c8\u5668\u548c\u5e94\u7528\u7a0b\u5e8f\u4e2d\u7684\u6807\u51c6\u529f\u80fd\u3002\u57fa\u4e8e HTTPS \u7684\u516c\u5171 DNS \u63d0\u4f9b\u5546\u7684\u6301\u7eed\u589e\u957f\u4ee5\u53ca DNS \u8fd0\u8425\u5546\u5bf9 DoH \u7684\u91c7\u7528\u5c06\u6709\u52a9\u4e8e\u5176\u5e7f\u6cdb\u4f7f\u7528\u3002<\/p>\n

            \u6b64\u5916\uff0c\u65b0\u578b DNS \u6280\u672f\u548c\u5b89\u5168\u589e\u5f3a\u7684\u5f00\u53d1\uff0c\u4f8b\u5982\u5c06 DoH \u4e0e DNSSEC \u76f8\u7ed3\u5408\u6216\u5b9e\u65bd DNS \u8499\u773c\u7b49\u9690\u79c1\u4fdd\u62a4\u529f\u80fd\uff0c\u53ef\u80fd\u4f1a\u8fdb\u4e00\u6b65\u589e\u5f3a DNS \u89e3\u6790\u7684\u9690\u79c1\u548c\u5b89\u5168\u6027\u3002<\/p>\n

            \u5982\u4f55\u4f7f\u7528\u4ee3\u7406\u670d\u52a1\u5668\u6216\u5982\u4f55\u901a\u8fc7 HTTPS \u5c06\u4ee3\u7406\u670d\u52a1\u5668\u4e0e DNS \u5173\u8054<\/h2>\n

            \u4ee3\u7406\u670d\u52a1\u5668\u5728\u57fa\u4e8e HTTPS \u7684 DNS \u73af\u5883\u4e2d\u53ef\u4ee5\u53d1\u6325\u81f3\u5173\u91cd\u8981\u7684\u4f5c\u7528\uff0c\u7279\u522b\u662f\u5728 DNS \u89e3\u6790\u53d7\u5230\u9650\u5236\u6216\u9700\u8981\u989d\u5916\u533f\u540d\u6027\u7684\u60c5\u51b5\u4e0b\u3002\u4ee5\u4e0b\u662f\u4ee3\u7406\u670d\u52a1\u5668\u901a\u8fc7 HTTPS \u4e0e DNS \u5173\u8054\u7684\u4e00\u4e9b\u65b9\u6cd5\uff1a<\/p>\n

              \n
            1. \n

              \u7ed5\u8fc7 DNS \u9650\u5236<\/strong>\uff1a\u5728 HTTPS \u4e0a\u7684 DNS \u88ab\u963b\u6b62\u7684\u533a\u57df\u6216\u7f51\u7edc\u4e2d\uff0c\u7528\u6237\u53ef\u4ee5\u901a\u8fc7\u4ee3\u7406\u670d\u52a1\u5668\u8def\u7531\u5176 DNS \u67e5\u8be2\uff0c\u4ee5\u8bbf\u95ee DoH \u89e3\u6790\u5668\u5e76\u5b89\u5168\u5730\u89e3\u6790\u57df\u540d\u3002<\/p>\n<\/li>\n

            2. \n

              \u589e\u5f3a\u533f\u540d\u6027<\/strong>\uff1a\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u5145\u5f53\u7528\u6237\u548c DoH \u89e3\u6790\u5668\u4e4b\u95f4\u7684\u4e2d\u4ecb\uff0c\u901a\u8fc7\u5411 DNS \u89e3\u6790\u5668\u9690\u85cf\u7528\u6237\u7684 IP \u5730\u5740\u6765\u63d0\u4f9b\u989d\u5916\u7684\u533f\u540d\u5c42\u3002<\/p>\n<\/li>\n

            3. \n

              \u8d1f\u8f7d\u5e73\u8861\u548c\u7f13\u5b58<\/strong>\uff1a\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u5e2e\u52a9\u5728\u591a\u4e2a DoH \u89e3\u6790\u5668\u4e4b\u95f4\u5206\u914d DNS \u67e5\u8be2\uff0c\u786e\u4fdd\u66f4\u597d\u7684\u8d1f\u8f7d\u5e73\u8861\uff0c\u5e76\u53ef\u80fd\u901a\u8fc7\u7f13\u5b58\u51cf\u5c11 DNS \u89e3\u6790\u65f6\u95f4\u3002<\/p>\n<\/li>\n

            4. \n

              \u5b9a\u5236 DoH \u5b9e\u65bd<\/strong>\uff1a\u7ec4\u7ec7\u53ef\u4ee5\u90e8\u7f72\u5177\u6709 DNS over HTTPS \u529f\u80fd\u7684\u79c1\u6709\u4ee3\u7406\u670d\u52a1\u5668\uff0c\u4f7f\u4ed6\u4eec\u80fd\u591f\u66f4\u597d\u5730\u63a7\u5236\u5176 DNS \u6d41\u91cf\u5e76\u7ef4\u62a4\u5176 DNS \u9690\u79c1\u3002<\/p>\n<\/li>\n<\/ol>\n

              \u76f8\u5173\u94fe\u63a5<\/h2>\n

              \u6709\u5173 HTTPS \u4e0a\u7684 DNS \u7684\u66f4\u591a\u4fe1\u606f\uff0c\u60a8\u53ef\u4ee5\u63a2\u7d22\u4ee5\u4e0b\u8d44\u6e90\uff1a<\/p>\n

                \n
              1. Mozilla Wiki \u2013 HTTPS \u4e0a\u7684 DNS<\/a><\/li>\n
              2. Cloudflare \u2013 \u57fa\u4e8e HTTPS \u7684 DNS<\/a><\/li>\n
              3. Google \u516c\u5171 DNS \u2013 \u57fa\u4e8e HTTPS \u7684 DNS<\/a><\/li>\n
              4. Quad9 \u2013 \u57fa\u4e8e HTTPS \u7684 DNS<\/a><\/li>\n
              5. IETF RFC 8484 \u2013 \u901a\u8fc7 HTTPS \u8fdb\u884c DNS \u67e5\u8be2 (DoH)<\/a><\/li>\n<\/ol>\n

                \u603b\u4e4b\uff0c\u57fa\u4e8e HTTPS \u7684 DNS \u662f\u4ee3\u7406\u670d\u52a1\u5668\u9886\u57df\u7684\u4e00\u9879\u91cd\u5927\u8fdb\u6b65\uff0c\u4e3a\u7528\u6237\u7684 DNS \u67e5\u8be2\u63d0\u4f9b\u4e86\u589e\u5f3a\u7684\u9690\u79c1\u6027\u548c\u5b89\u5168\u6027\u3002\u901a\u8fc7\u52a0\u5bc6 HTTPS \u5185\u7684 DNS \u6d41\u91cf\uff0cHTTPS \u4e0a\u7684 DNS \u53ef\u786e\u4fdd\u654f\u611f\u4fe1\u606f\u4fdd\u6301\u673a\u5bc6\u5e76\u9632\u6b62\u672a\u7ecf\u6388\u6743\u7684\u8bbf\u95ee\u3002\u968f\u7740\u4e92\u8054\u7f51\u7684\u4e0d\u65ad\u53d1\u5c55\uff0c\u57fa\u4e8e HTTPS \u7684 DNS \u5f88\u53ef\u80fd\u6210\u4e3a\u4fdd\u62a4\u5728\u7ebf\u901a\u4fe1\u548c\u4fdd\u62a4\u7528\u6237\u6570\u636e\u514d\u53d7\u6f5c\u5728\u5a01\u80c1\u7684\u4e0d\u53ef\u6216\u7f3a\u7684\u4e00\u90e8\u5206\u3002<\/p>","protected":false},"featured_media":476909,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-476908","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about DNS over HTTPS: Enhancing Privacy and Security in the World of Proxy Servers<\/mark>","faq_items":[{"question":"What is DNS over HTTPS (DoH)?","answer":"

                DNS over HTTPS (DoH) is a protocol that combines DNS and HTTPS to encrypt and secure DNS queries and responses. It prevents eavesdropping and manipulation of DNS traffic, enhancing user privacy and security during internet browsing.<\/p>"},{"question":"How does DNS over HTTPS work?","answer":"

                When a user wants to access a website, their device sends a DNS query to resolve the domain name to an IP address. With DoH, this query is encrypted within HTTPS and sent to a DNS-over-HTTPS resolver. The resolver then forwards the query to a DNS server, receives the encrypted response, and sends it back to the user's device, ensuring data confidentiality.<\/p>"},{"question":"What are the key features of DNS over HTTPS?","answer":"

                DNS over HTTPS offers encryption, authenticity, privacy, and improved security. It encrypts DNS queries, authenticates communication with DNS servers, prevents spying on users' DNS traffic, and safeguards against DNS spoofing and cache poisoning attacks.<\/p>"},{"question":"How can I use DNS over HTTPS?","answer":"

                You can enable DNS over HTTPS on your devices or applications by configuring the DNS resolver settings. Some modern web browsers support DoH natively, making it easy to activate encrypted DNS resolution. Additionally, you can use public DNS over HTTPS services provided by companies like Cloudflare, Google, Quad9, or set up your private DoH server.<\/p>"},{"question":"What are the types of DNS over HTTPS?","answer":"

                There are two main types of DNS over HTTPS implementations: public DNS over HTTPS services provided by third-party companies, and private DNS over HTTPS servers that users can set up for their networks.<\/p>"},{"question":"How can proxy servers be associated with DNS over HTTPS?","answer":"

                Proxy servers can complement DNS over HTTPS by allowing users to bypass DNS restrictions, enhance anonymity, and provide load balancing and caching capabilities. Organizations can also deploy private proxy servers with DoH support to have more control over their DNS traffic.<\/p>"},{"question":"What are the future perspectives of DNS over HTTPS?","answer":"

                DNS over HTTPS is expected to become more widely adopted as user awareness of online privacy increases. As technology evolves, it may be combined with DNSSEC or other privacy-preserving features. Additionally, more DNS operators may embrace DoH to enhance their services' security.<\/p>"},{"question":"Where can I find more information about DNS over HTTPS?","answer":"

                For more in-depth details about DNS over HTTPS, you can explore the Mozilla Wiki, Cloudflare, Google Public DNS, Quad9, and IETF RFC 8484 (DNS Queries over HTTPS). These resources provide comprehensive insights into the protocol and its implementation.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki\/476908","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki\/476908\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/media\/476909"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/media?parent=476908"}],"curies":[{"name":"\u53ef\u6e7f\u6027\u7c89\u5242","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}