{"id":476910,"date":"2023-08-09T09:05:02","date_gmt":"2023-08-09T09:05:02","guid":{"rendered":""},"modified":"2023-09-05T11:13:39","modified_gmt":"2023-09-05T11:13:39","slug":"dns-over-https-doh","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/cn\/wiki\/dns-over-https-doh\/","title":{"rendered":"\u57fa\u4e8e HTTPS \u7684 DNS (DoH)"},"content":{"rendered":"

DNS over HTTPS (DoH) \u662f\u4e00\u79cd\u534f\u8bae\uff0c\u5b83\u901a\u8fc7\u4f7f\u7528 HTTPS\uff08\u5b89\u5168\u8d85\u6587\u672c\u4f20\u8f93\u534f\u8bae\uff09\u52a0\u5bc6 DNS\uff08\u57df\u540d\u7cfb\u7edf\uff09\u8bf7\u6c42\uff0c\u4ece\u800c\u589e\u5f3a DNS \u8bf7\u6c42\u7684\u5b89\u5168\u6027\u548c\u9690\u79c1\u6027\u3002\u6b64\u534f\u8bae\u5141\u8bb8\u5ba2\u6237\u7aef\u5b89\u5168\u5730\u5c06\u57df\u540d\u89e3\u6790\u4e3a IP \u5730\u5740\uff0c\u4ece\u800c\u786e\u4fdd\u7b2c\u4e09\u65b9\u65e0\u6cd5\u8f7b\u6613\u62e6\u622a\u6216\u7be1\u6539 DNS \u67e5\u8be2\u548c\u54cd\u5e94\u3002DNS over HTTPS \u662f\u4e92\u8054\u7f51\u5b89\u5168\u9886\u57df\u7684\u4e00\u9879\u91cd\u8981\u8fdb\u6b65\uff0c\u5b83\u56e0\u80fd\u591f\u4fdd\u62a4\u7528\u6237\u514d\u53d7\u5404\u79cd\u5a01\u80c1\uff08\u4f8b\u5982 DNS \u52ab\u6301\u548c\u7a83\u542c\uff09\u800c\u5e7f\u53d7\u6b22\u8fce\u3002<\/p>\n

DNS over HTTPS\uff08DoH\uff09\u7684\u8d77\u6e90\u5386\u53f2\u4ee5\u53ca\u5bf9\u5b83\u7684\u9996\u6b21\u63d0\u53ca<\/h2>\n

\u52a0\u5bc6 DNS \u6d41\u91cf\u7684\u6982\u5ff5\u5df2\u7ecf\u5b58\u5728\u4e86\u4e00\u6bb5\u65f6\u95f4\uff0c\u4f46\u5f53 Mozilla \u7684 Patrick McManus \u4e8e 2017 \u5e74 10 \u6708\u9996\u6b21\u63d0\u51fa DNS over HTTPS \u65f6\uff0c\u5b83\u5f15\u8d77\u4e86\u5e7f\u6cdb\u5173\u6ce8\u3002DoH \u534f\u8bae\u7684\u521d\u7a3f\u7531 Patrick McManus \u548c\u5176\u4ed6\u8d21\u732e\u8005\u5728\u4e92\u8054\u7f51\u5de5\u7a0b\u4efb\u52a1\u7ec4 (IETF) \u4e0a\u53d1\u5e03\u3002\u4ece\u90a3\u65f6\u8d77\uff0c\u8be5\u534f\u8bae\u7ecf\u5386\u4e86\u591a\u6b21\u8fed\u4ee3\u548c\u6539\u8fdb\uff0c\u4ece\u800c\u5f97\u5230\u4e86\u5e7f\u6cdb\u7684\u63a5\u53d7\u548c\u91c7\u7528\u3002<\/p>\n

\u6709\u5173 DNS over HTTPS (DoH) \u7684\u8be6\u7ec6\u4fe1\u606f<\/h2>\n

DNS over HTTPS \u5229\u7528 HTTPS \u7684\u52a0\u5bc6\u529f\u80fd\uff0c\u63d0\u4f9b\u4e86\u4e00\u79cd\u5b89\u5168\u4e14\u79c1\u5bc6\u7684\u57df\u540d\u89e3\u6790\u65b9\u5f0f\u3002\u4f20\u7edf\u7684 DNS \u67e5\u8be2\u901a\u5e38\u4ee5\u7eaf\u6587\u672c\u5f62\u5f0f\u53d1\u9001\uff0c\u56e0\u6b64\u5bb9\u6613\u53d7\u5230\u62e6\u622a\u548c\u64cd\u7eb5\u3002\u501f\u52a9 DoH\uff0cDNS \u67e5\u8be2\u5c06\u88ab\u52a0\u5bc6\u5e76\u901a\u8fc7\u5b89\u5168\u901a\u9053\u4f20\u8f93\uff0c\u4ece\u800c\u5177\u6709\u4ee5\u4e0b\u51e0\u4e2a\u4f18\u70b9\uff1a<\/p>\n

    \n
  1. \n

    \u9690\u79c1\uff1a<\/strong> DNS over HTTPS \u9690\u85cf\u4e86 DNS \u8bf7\u6c42\u7684\u5185\u5bb9\uff0c\u963b\u6b62 ISP\u3001\u7f51\u7edc\u7ba1\u7406\u5458\u6216\u6076\u610f\u884c\u4e3a\u8005\u6839\u636e\u7528\u6237\u7684 DNS \u6d41\u91cf\u76d1\u89c6\u7528\u6237\u7684\u4e92\u8054\u7f51\u6d3b\u52a8\u3002<\/p>\n<\/li>\n

  2. \n

    \u5b89\u5168\uff1a<\/strong> \u52a0\u5bc6 DNS \u6d41\u91cf\u53ef\u4fdd\u62a4\u7528\u6237\u514d\u53d7\u57fa\u4e8e DNS \u7684\u653b\u51fb\uff0c\u4f8b\u5982 DNS \u6b3a\u9a97\u548c\u4e2d\u95f4\u4eba\u653b\u51fb\uff0c\u786e\u4fdd\u7528\u6237\u4ece\u6743\u5a01 DNS \u670d\u52a1\u5668\u6536\u5230\u5408\u6cd5\u54cd\u5e94\u3002<\/p>\n<\/li>\n

  3. \n

    \u89c4\u907f\u5ba1\u67e5\uff1a<\/strong> DNS over HTTPS \u53ef\u4ee5\u5e2e\u52a9\u7ed5\u8fc7\u67d0\u4e9b\u653f\u5e9c\u6216 ISP \u65bd\u52a0\u7684 DNS \u8fc7\u6ee4\u548c\u5ba1\u67e5\uff0c\u5141\u8bb8\u7528\u6237\u8bbf\u95ee\u88ab\u963b\u6b62\u7684\u7f51\u7ad9\u548c\u670d\u52a1\u3002<\/p>\n<\/li>\n

  4. \n

    \u6539\u8fdb\u7684\u6027\u80fd\uff1a<\/strong> \u901a\u8fc7\u4f7f\u7528 HTTPS\uff0cDNS over HTTPS \u53ef\u4ee5\u5229\u7528\u73b0\u6709\u7684\u57fa\u7840\u8bbe\u65bd\u5e76\u53d7\u76ca\u4e8e\u9488\u5bf9\u5b89\u5168 Web \u901a\u4fe1\u6240\u505a\u7684\u4f18\u5316\uff0c\u4ece\u800c\u6709\u53ef\u80fd\u7f29\u77ed DNS \u89e3\u6790\u65f6\u95f4\u3002<\/p>\n<\/li>\n<\/ol>\n

    DNS over HTTPS\uff08DoH\uff09\u7684\u5185\u90e8\u7ed3\u6784 - \u5de5\u4f5c\u539f\u7406<\/h2>\n

    DNS over HTTPS \u7684\u5de5\u4f5c\u539f\u7406\u662f\u5c06 DNS \u67e5\u8be2\u548c\u54cd\u5e94\u5305\u88c5\u5728 HTTPS \u6570\u636e\u5305\u4e2d\uff0c\u7136\u540e\u5c06\u5176\u53d1\u9001\u5230\u4e13\u7528\u7684 DoH \u670d\u52a1\u5668\u5e76\u4ece\u4e13\u7528\u7684 DoH \u670d\u52a1\u5668\u63a5\u6536\u3002\u4ee5\u4e0b\u662f DNS over HTTPS \u5de5\u4f5c\u539f\u7406\u7684\u5206\u6b65\u8bf4\u660e\uff1a<\/p>\n

      \n
    1. \n

      \u5ba2\u6237\u8981\u6c42\uff1a<\/strong> \u5f53\u7528\u6237\u7684\u8bbe\u5907\u53d1\u8d77 DNS \u89e3\u6790\u8bf7\u6c42\u65f6\uff0c\u8bbe\u5907\u4e0a\u7684 DNS \u5ba2\u6237\u7aef\u4f1a\u5c06\u67e5\u8be2\u53d1\u9001\u5230\u4e0e DoH \u517c\u5bb9\u7684 DNS \u89e3\u6790\u5668\uff0c\u8be5\u89e3\u6790\u5668\u901a\u5e38\u7531 DoH \u670d\u52a1\u63d0\u4f9b\u5546\u8fd0\u8425\u3002<\/p>\n<\/li>\n

    2. \n

      DNS \u67e5\u8be2\u52a0\u5bc6\uff1a<\/strong> DNS \u5ba2\u6237\u7aef\u4f7f\u7528 HTTPS \u52a0\u5bc6 DNS \u67e5\u8be2\uff0c\u6709\u6548\u5730\u5c06\u5176\u8f6c\u6362\u4e3a HTTPS GET \u6216 POST \u8bf7\u6c42\u3002<\/p>\n<\/li>\n

    3. \n

      HTTP\uff08S\uff09\u4f20\u8f93\uff1a<\/strong> \u7136\u540e\uff0c\u52a0\u5bc6\u7684 DNS \u67e5\u8be2\u901a\u8fc7\u6807\u51c6 HTTPS \u7aef\u53e3 (443) \u53d1\u9001\u5230 DoH \u670d\u52a1\u5668\u3002<\/p>\n<\/li>\n

    4. \n

      DoH \u670d\u52a1\u5668\u5904\u7406\uff1a<\/strong> DoH \u670d\u52a1\u5668\u63a5\u6536\u52a0\u5bc6\u7684 DNS \u67e5\u8be2\uff0c\u5bf9\u5176\u8fdb\u884c\u89e3\u5bc6\uff0c\u7136\u540e\u5c06 DNS \u67e5\u8be2\u8f6c\u53d1\u5230\u9002\u5f53\u7684 DNS \u89e3\u6790\u5668\u4ee5\u83b7\u53d6\u4e0e\u8bf7\u6c42\u7684\u57df\u540d\u76f8\u5173\u8054\u7684 IP \u5730\u5740\u3002<\/p>\n<\/li>\n

    5. \n

      DNS \u89e3\u6790\uff1a<\/strong> DNS \u89e3\u6790\u5668\u5904\u7406\u67e5\u8be2\uff0c\u68c0\u7d22 IP \u5730\u5740\uff0c\u5e76\u5c06\u54cd\u5e94\u53d1\u9001\u56de DoH \u670d\u52a1\u5668\u3002<\/p>\n<\/li>\n

    6. \n

      DNS \u54cd\u5e94\u52a0\u5bc6\uff1a<\/strong> DoH \u670d\u52a1\u5668\u4f7f\u7528 HTTPS \u52a0\u5bc6 DNS \u54cd\u5e94\u3002<\/p>\n<\/li>\n

    7. \n

      \u56de\u590d\u5ba2\u6237\uff1a<\/strong> \u52a0\u5bc6\u7684 DNS \u54cd\u5e94\u901a\u8fc7 HTTPS \u8fde\u63a5\u53d1\u9001\u56de\u5ba2\u6237\u7aef\u3002<\/p>\n<\/li>\n

    8. \n

      \u5ba2\u6237\u7aef\u89e3\u5bc6\uff1a<\/strong> \u5ba2\u6237\u7aef\u89e3\u5bc6 DNS \u54cd\u5e94\uff0c\u83b7\u53d6 IP \u5730\u5740\uff0c\u5e76\u4f7f\u7528\u5b83\u6765\u8fde\u63a5\u5230\u6240\u9700\u7684 Web \u670d\u52a1\u5668\u3002<\/p>\n<\/li>\n<\/ol>\n

      \u6b64\u8fc7\u7a0b\u53ef\u786e\u4fdd\u5ba2\u6237\u7aef\u548c DoH \u670d\u52a1\u5668\u4e4b\u95f4\u7684\u6240\u6709 DNS \u901a\u4fe1\u4fdd\u6301\u52a0\u5bc6\u548c\u5b89\u5168\uff0c\u4ece\u800c\u4fdd\u62a4\u7528\u6237\u7684\u9690\u79c1\u548c\u6570\u636e\u5b8c\u6574\u6027\u3002<\/p>\n

      DNS over HTTPS\uff08DoH\uff09\u5173\u952e\u7279\u6027\u5206\u6790<\/h2>\n

      DNS over HTTPS \u63d0\u4f9b\u4e86\u51e0\u4e2a\u5173\u952e\u529f\u80fd\uff0c\u4f7f\u5176\u6709\u522b\u4e8e\u4f20\u7edf DNS \u548c\u5176\u4ed6 DNS \u52a0\u5bc6\u65b9\u6cd5\uff1a<\/p>\n

        \n
      1. \n

        \u7aef\u5230\u7aef\u52a0\u5bc6\uff1a<\/strong> DNS over HTTPS \u4f1a\u52a0\u5bc6\u4ece\u5ba2\u6237\u7aef\u5230 DoH \u670d\u52a1\u5668\u7684 DNS \u67e5\u8be2\uff0c\u5e76\u4e14\u4e5f\u4f1a\u52a0\u5bc6\u4ece DoH \u670d\u52a1\u5668\u5230\u5ba2\u6237\u7aef\u7684\u54cd\u5e94\u3002\u8fd9\u79cd\u7aef\u5230\u7aef\u52a0\u5bc6\u53ef\u786e\u4fdd\u53ea\u6709\u5ba2\u6237\u7aef\u548c DoH \u670d\u52a1\u5668\u624d\u80fd\u7406\u89e3 DNS \u67e5\u8be2\u548c\u54cd\u5e94\u3002<\/p>\n<\/li>\n

      2. \n

        \u53ef\u79fb\u690d\u6027\uff1a<\/strong> \u4efb\u4f55\u652f\u6301 HTTPS \u7684\u8bbe\u5907\u90fd\u53ef\u4ee5\u4f7f\u7528 DNS over HTTPS\uff0c\u4ece\u800c\u4e0e\u5404\u79cd\u5e73\u53f0\u548c\u64cd\u4f5c\u7cfb\u7edf\u517c\u5bb9\u3002<\/p>\n<\/li>\n

      3. \n

        \u9632\u62e6\u622a\u5b89\u5168\u6027\uff1a<\/strong> \u901a\u8fc7\u5229\u7528 HTTPS\uff0cDoH \u53ef\u4ee5\u9632\u6b62\u7a83\u542c\u548c\u7be1\u6539 DNS \u8bf7\u6c42\uff0c\u4fdd\u62a4\u7528\u6237\u514d\u53d7\u5404\u79cd\u57fa\u4e8e DNS \u7684\u653b\u51fb\u3002<\/p>\n<\/li>\n

      4. \n

        \u9690\u79c1\u589e\u5f3a\uff1a<\/strong> DNS over HTTPS \u9690\u85cf\u4e86\u7528\u6237\u7684 DNS \u67e5\u8be2\uff0c\u963b\u6b62 ISP \u548c\u5176\u4ed6\u5b9e\u4f53\u76d1\u63a7\u548c\u6536\u96c6\u6709\u5173\u5176\u4e92\u8054\u7f51\u6d3b\u52a8\u7684\u6570\u636e\u3002<\/p>\n<\/li>\n

      5. \n

        \u5b9e\u65bd\u96be\u5ea6\uff1a<\/strong> \u7531\u4e8e DoH \u5229\u7528\u73b0\u6709\u7684 HTTPS \u57fa\u7840\u8bbe\u65bd\uff0c\u56e0\u6b64\u5bf9\u4e8e\u5df2\u7ecf\u652f\u6301 HTTPS \u7684 Web \u6d4f\u89c8\u5668\u548c\u5e94\u7528\u7a0b\u5e8f\u6765\u8bf4\uff0c\u901a\u8fc7 HTTPS \u5b9e\u73b0 DNS \u76f8\u5bf9\u7b80\u5355\u3002<\/p>\n<\/li>\n<\/ol>\n

        HTTPS \u4e0a\u7684 DNS (DoH) \u7c7b\u578b<\/h2>\n

        DNS over HTTPS \u90e8\u7f72\u4e3b\u8981\u6709\u4e24\u79cd\u7c7b\u578b\uff1a<\/p>\n

          \n
        1. \n

          \u516c\u5171 DoH \u89e3\u6790\u5668\uff1a<\/strong> \u8fd9\u4e9b\u662f\u7531\u5404\u79cd\u7ec4\u7ec7\u548c\u670d\u52a1\u63d0\u4f9b\u5546\u8fd0\u8425\u7684 DoH \u670d\u52a1\u5668\uff0c\u5b83\u4eec\u5411\u516c\u4f17\u63d0\u4f9b DoH \u89e3\u6790\u3002\u7528\u6237\u53ef\u4ee5\u914d\u7f6e\u4ed6\u4eec\u7684\u8bbe\u5907\u6216\u5e94\u7528\u7a0b\u5e8f\u4ee5\u76f4\u63a5\u4f7f\u7528\u8fd9\u4e9b\u516c\u5171 DoH \u89e3\u6790\u5668\u3002<\/p>\n<\/li>\n

        2. \n

          \u79c1\u6709 DoH \u89e3\u6790\u5668\uff1a<\/strong> \u5728\u8fd9\u79cd\u60c5\u51b5\u4e0b\uff0c\u79c1\u6709 DoH \u89e3\u6790\u5668\u8bbe\u7f6e\u5728\u7279\u5b9a\u7ec4\u7ec7\u7684\u7f51\u7edc\u57fa\u7840\u8bbe\u65bd\u5185\uff0c\u4e3a\u5176\u7528\u6237\u63d0\u4f9b\u5b89\u5168\u7684 DNS \u89e3\u6790\uff0c\u800c\u65e0\u9700\u4f9d\u8d56\u516c\u5171 DoH \u89e3\u6790\u5668\u3002\u79c1\u6709 DoH \u89e3\u6790\u5668\u53ef\u4ee5\u589e\u5f3a\u7ec4\u7ec7\u5185\u90e8 DNS \u89e3\u6790\u7684\u5b89\u5168\u6027\u548c\u9690\u79c1\u6027\u3002<\/p>\n<\/li>\n<\/ol>\n

          DNS over HTTPS (DoH) \u7684\u4f7f\u7528\u65b9\u6cd5\u3001\u76f8\u5173\u95ee\u9898\u53ca\u89e3\u51b3\u65b9\u6848<\/h2>\n

          \u4f7f\u7528 DNS over HTTPS\uff08DoH\uff09<\/h3>\n

          \u7528\u6237\u53ef\u4ee5\u901a\u8fc7\u591a\u79cd\u65b9\u5f0f\u901a\u8fc7 HTTPS \u4f7f\u7528 DNS\uff1a<\/p>\n

            \n
          1. \n

            Web \u6d4f\u89c8\u5668\uff1a<\/strong> \u8bb8\u591a\u73b0\u4ee3\u7f51\u7edc\u6d4f\u89c8\u5668\uff08\u4f8b\u5982 Mozilla Firefox \u548c Google Chrome\uff09\u90fd\u5185\u7f6e\u4e86\u5bf9 DNS over HTTPS \u7684\u652f\u6301\u3002\u7528\u6237\u53ef\u4ee5\u5728\u6d4f\u89c8\u5668\u8bbe\u7f6e\u4e2d\u542f\u7528\u6b64\u529f\u80fd\uff0c\u4ee5\u4eab\u53d7\u589e\u5f3a\u7684\u5b89\u5168\u6027\u548c\u9690\u79c1\u6027\u3002<\/p>\n<\/li>\n

          2. \n

            \u64cd\u4f5c\u7cfb\u7edf\u914d\u7f6e\uff1a<\/strong> \u4e00\u4e9b\u64cd\u4f5c\u7cfb\u7edf\u5141\u8bb8\u7528\u6237\u5728\u7cfb\u7edf\u8303\u56f4\u5185\u542f\u7528 DNS over HTTPS\uff0c\u786e\u4fdd\u6765\u81ea\u5404\u79cd\u5e94\u7528\u7a0b\u5e8f\u7684\u6240\u6709 DNS \u67e5\u8be2\u90fd\u7ecf\u8fc7\u52a0\u5bc6\u3002<\/p>\n<\/li>\n

          3. \n

            \u7b2c\u4e09\u65b9\u5e94\u7528\u7a0b\u5e8f\uff1a<\/strong> \u7528\u6237\u8fd8\u53ef\u4ee5\u4f7f\u7528\u7b2c\u4e09\u65b9 DNS over HTTPS \u5ba2\u6237\u7aef\u6216\u5e94\u7528\u7a0b\u5e8f\uff0c\u8fd9\u4e9b\u5ba2\u6237\u7aef\u6216\u5e94\u7528\u7a0b\u5e8f\u53ef\u72ec\u7acb\u4e8e\u64cd\u4f5c\u7cfb\u7edf\u6216 Web \u6d4f\u89c8\u5668\u901a\u8fc7 HTTPS \u63d0\u4f9b DNS \u89e3\u6790\u3002<\/p>\n<\/li>\n<\/ol>\n

            \u95ee\u9898\u4e0e\u89e3\u51b3\u65b9\u6848<\/h3>\n

            \u867d\u7136 DNS over HTTPS \u5177\u6709\u8bb8\u591a\u4f18\u70b9\uff0c\u4f46\u5176\u90e8\u7f72\u4e5f\u9762\u4e34\u7740\u4e00\u4e9b\u6311\u6218\uff1a<\/p>\n

              \n
            1. \n

              \u4e0d\u517c\u5bb9\uff1a<\/strong> \u5e76\u975e\u6240\u6709 DNS \u89e3\u6790\u5668\u6216 DNS \u670d\u52a1\u5668\u90fd\u652f\u6301 DoH\uff0c\u8fd9\u4f1a\u5bfc\u81f4\u6f5c\u5728\u7684\u4e0d\u517c\u5bb9\u95ee\u9898\u3002\u4e0d\u8fc7\uff0cDoH \u7684\u5e7f\u6cdb\u91c7\u7528\u6b63\u5728\u9f13\u52b1 DNS \u89e3\u6790\u5668\u8fd0\u8425\u5546\u589e\u52a0\u5bf9\u6b64\u534f\u8bae\u7684\u652f\u6301\u3002<\/p>\n<\/li>\n

            2. \n

              \u5b89\u5168\u95ee\u9898\uff1a<\/strong> \u867d\u7136 DNS over HTTPS \u89e3\u51b3\u4e86\u8bb8\u591a\u5b89\u5168\u95ee\u9898\uff0c\u4f46\u5982\u679c\u5b9e\u65bd\u4e0d\u5f53\uff0c\u53ef\u80fd\u4f1a\u5e26\u6765\u65b0\u7684\u98ce\u9669\u3002\u7528\u6237\u5fc5\u987b\u4fe1\u4efb\u4ed6\u4eec\u6b63\u5728\u4f7f\u7528\u7684 DoH \u89e3\u6790\u5668\uff0c\u56e0\u4e3a\u5b83\u5c06\u6210\u4e3a DNS \u67e5\u8be2\u7684\u65b0\u4e2d\u4ecb\u3002\u8058\u7528\u4fe1\u8a89\u826f\u597d\u4e14\u503c\u5f97\u4fe1\u8d56\u7684 DoH \u670d\u52a1\u63d0\u4f9b\u5546\u5bf9\u4e8e\u964d\u4f4e\u6f5c\u5728\u98ce\u9669\u81f3\u5173\u91cd\u8981\u3002<\/p>\n<\/li>\n

            3. \n

              DNS \u8fc7\u6ee4\u548c\u5bb6\u957f\u63a7\u5236\uff1a<\/strong> DNS over HTTPS \u53ef\u4ee5\u7ed5\u8fc7 DNS \u8fc7\u6ee4\u548c\u5bb6\u957f\u63a7\u5236\u673a\u5236\uff0c\u53ef\u80fd\u4f1a\u5f15\u53d1\u5bf9\u5185\u5bb9\u63a7\u5236\u548c\u8bbf\u95ee\u4e0d\u9002\u5f53\u6216\u6709\u5bb3\u7f51\u7ad9\u7684\u62c5\u5fe7\u3002<\/p>\n<\/li>\n

            4. \n

              \u672c\u5730\u7f51\u7edc\u7ba1\u7406\uff1a<\/strong> \u5bf9\u4e8e\u4f9d\u8d56 DNS \u7ba1\u7406\u672c\u5730\u7f51\u7edc\u7684\u7f51\u7edc\u7ba1\u7406\u5458\u6765\u8bf4\uff0cHTTPS \u4e0a\u7684 DNS \u53ef\u80fd\u4f1a\u5e26\u6765\u6311\u6218\u3002\u5927\u89c4\u6a21\u5b9e\u65bd DoH \u9700\u8981\u4ed4\u7ec6\u89c4\u5212\u5e76\u8003\u8651\u672c\u5730\u7f51\u7edc\u7ba1\u7406\u8981\u6c42\u3002<\/p>\n<\/li>\n<\/ol>\n

              \u4e3a\u4e86\u5e94\u5bf9\u8fd9\u4e9b\u6311\u6218\uff0c\u7ec4\u7ec7\u548c\u4e2a\u4eba\u5e94\u8be5\u4ed4\u7ec6\u8bc4\u4f30\u4ed6\u4eec\u7684 DNS over HTTPS \u90e8\u7f72\uff0c\u9009\u62e9\u53ef\u9760\u7684 DoH \u670d\u52a1\u63d0\u4f9b\u5546\uff0c\u5e76\u5b9e\u65bd\u9002\u5f53\u7684\u5b89\u5168\u63aa\u65bd\u3002<\/p>\n

              \u4e3b\u8981\u7279\u70b9\u53ca\u4e0e\u540c\u7c7b\u672f\u8bed\u7684\u5176\u4ed6\u6bd4\u8f83<\/h2>\n

              \u4ee5\u4e0b\u662f DNS over HTTPS (DoH) \u4e0e\u7c7b\u4f3c DNS \u5b89\u5168\u673a\u5236\u7684\u6bd4\u8f83\uff1a<\/p>\n\n\n\n\n\n\n\n\n
              \u673a\u5236<\/th>\n\u7279\u5f81<\/th>\n\u4e0e DoH \u7684\u6bd4\u8f83<\/th>\n<\/tr>\n<\/thead>\n
              \u57fa\u4e8e TLS \u7684 DNS (DoT)<\/td>\n\u4f7f\u7528 TLS\uff08\u4f20\u8f93\u5c42\u5b89\u5168\u6027\uff09\u52a0\u5bc6 DNS \u6d41\u91cf<\/td>\nDoT \u548c DoH \u90fd\u4e3a DNS \u6d41\u91cf\u63d0\u4f9b\u52a0\u5bc6\uff0c\u4f46 DoH \u4f7f\u7528 HTTPS\uff0c\u5b83\u5229\u7528\u73b0\u6709\u7684 Web \u57fa\u7840\u8bbe\u65bd\u5e76\u4e14\u53ef\u80fd\u5f97\u5230\u66f4\u5e7f\u6cdb\u7684\u652f\u6301\u3002<\/td>\n<\/tr>\n
              DNS\u52a0\u5bc6<\/td>\n\u4f7f\u7528\u52a0\u5bc6\u534f\u8bae\u4fdd\u62a4 DNS \u67e5\u8be2<\/td>\nDNSCrypt \u662f\u53e6\u4e00\u79cd DNS \u52a0\u5bc6\u65b9\u6cd5\uff0c\u4f46 DoH \u7531\u4e8e\u4f7f\u7528 HTTPS \u800c\u53d8\u5f97\u66f4\u53d7\u6b22\u8fce\uff0c\u8fd9\u4f7f\u5f97\u5b83\u4e0e\u5df2\u7ecf\u652f\u6301 HTTPS \u7684 Web \u6d4f\u89c8\u5668\u548c\u7cfb\u7edf\u517c\u5bb9\u3002<\/td>\n<\/tr>\n
              VPN\uff08\u865a\u62df\u4e13\u7528\u7f51\u7edc\uff09<\/td>\n\u901a\u8fc7\u5b89\u5168\u7684\u4e13\u7528\u7f51\u7edc\u8def\u7531\u6240\u6709\u4e92\u8054\u7f51\u6d41\u91cf<\/td>\n\u867d\u7136 VPN \u53ef\u4ee5\u589e\u5f3a\u6574\u4f53\u5728\u7ebf\u5b89\u5168\u6027\uff0c\u4f46\u5b83\u4eec\u5e76\u975e\u4e13\u95e8\u4e3a\u4fdd\u62a4 DNS \u8bf7\u6c42\u800c\u8bbe\u8ba1\u3002DoH \u4e3a DNS \u89e3\u6790\u63d0\u4f9b\u96c6\u4e2d\u52a0\u5bc6\uff0c\u800c\u65e0\u9700\u901a\u8fc7\u5355\u72ec\u7684\u7f51\u7edc\u8def\u7531\u6240\u6709\u6d41\u91cf\u3002<\/td>\n<\/tr>\n
              DNSSEC\uff08DNS \u5b89\u5168\u6269\u5c55\uff09<\/td>\n\u4e3a DNS \u6570\u636e\u6dfb\u52a0\u6570\u5b57\u7b7e\u540d<\/td>\nDNSSEC \u4e3b\u8981\u4fa7\u91cd\u4e8e\u786e\u4fdd DNS \u6570\u636e\u7684\u771f\u5b9e\u6027\u548c\u5b8c\u6574\u6027\uff0c\u4f46\u4e0d\u52a0\u5bc6 DNS \u67e5\u8be2\u3002DNSSEC \u548c DoH \u53ef\u4ee5\u76f8\u4e92\u8865\u5145\uff0c\u63d0\u4f9b\u5168\u9762\u7684 DNS \u5b89\u5168\u65b9\u6cd5\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

              \u4e0e DNS over HTTPS (DoH) \u76f8\u5173\u7684\u672a\u6765\u89c2\u70b9\u548c\u6280\u672f<\/h2>\n

              DNS over HTTPS \u5f88\u53ef\u80fd\u5728\u4fdd\u62a4 DNS \u901a\u4fe1\u548c\u4fdd\u62a4\u4e92\u8054\u7f51\u7528\u6237\u9690\u79c1\u65b9\u9762\u7ee7\u7eed\u53d6\u5f97\u91cd\u5927\u8fdb\u6b65\u3002\u968f\u7740\u5176\u91c7\u7528\u7387\u4e0d\u65ad\u589e\u957f\uff0c\u6211\u4eec\u53ef\u4ee5\u671f\u5f85\u4ee5\u4e0b\u4e0e DNS over HTTPS \u76f8\u5173\u7684\u53d1\u5c55\u548c\u6280\u672f\uff1a<\/p>\n

                \n
              1. \n

                \u589e\u52a0\u652f\u6301\uff1a<\/strong> \u9884\u8ba1\u4f1a\u6709\u66f4\u591a DNS \u89e3\u6790\u5668\u548c DNS \u670d\u52a1\u5668\u589e\u52a0\u5bf9 DoH \u7684\u652f\u6301\uff0c\u4f7f\u5176\u6210\u4e3a\u5b89\u5168 DNS \u89e3\u6790\u7684\u6807\u51c6\u529f\u80fd\u3002<\/p>\n<\/li>\n

              2. \n

                \u52a0\u5bc6\u7684 SNI\uff08\u670d\u52a1\u5668\u540d\u79f0\u6307\u793a\uff09\uff1a<\/strong> \u52a0\u5bc6 SNI \u662f\u4e00\u79cd\u8865\u5145\u6280\u672f\uff0c\u53ef\u9690\u85cf\u7528\u6237\u5c1d\u8bd5\u8bbf\u95ee\u7684\u7f51\u7ad9\u7684\u4e3b\u673a\u540d\u3002\u5b83\u53ef\u4ee5\u4e0e DoH \u4e00\u8d77\u4f7f\u7528\u4ee5\u8fdb\u4e00\u6b65\u589e\u5f3a\u9690\u79c1\u3002<\/p>\n<\/li>\n

              3. \n

                \u7269\u8054\u7f51\u8bbe\u5907\u4e2d\u7684 HTTPS \u4e0a\u7684 DNS\uff1a<\/strong> \u968f\u7740\u7269\u8054\u7f51 (IoT) \u7684\u4e0d\u65ad\u6269\u5c55\uff0c\u5728 IoT \u8bbe\u5907\u4e2d\u5b9e\u65bd\u57fa\u4e8e HTTPS \u7684 DNS \u53ef\u4ee5\u63d0\u9ad8\u5b89\u5168\u6027\u5e76\u9632\u6b62\u5229\u7528 DNS \u6f0f\u6d1e\u7684\u6f5c\u5728\u653b\u51fb\u3002<\/p>\n<\/li>\n

              4. \n

                \u6807\u51c6\u5316\u548c\u76d1\u7ba1\uff1a<\/strong> \u968f\u7740 DoH \u7684\u666e\u53ca\uff0c\u53ef\u80fd\u4f1a\u5f15\u5165\u56f4\u7ed5\u5176\u5b9e\u65bd\u7684\u6807\u51c6\u5316\u5de5\u4f5c\u548c\u6cd5\u89c4\uff0c\u4ee5\u786e\u4fdd\u4e00\u81f4\u4e14\u5b89\u5168\u7684\u4f7f\u7528\u3002<\/p>\n<\/li>\n<\/ol>\n

                \u5982\u4f55\u4f7f\u7528\u4ee3\u7406\u670d\u52a1\u5668\u6216\u5c06\u5176\u4e0e DNS over HTTPS (DoH) \u5173\u8054<\/h2>\n

                \u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u901a\u8fc7\u4ee5\u4e0b\u65b9\u5f0f\u5728\u589e\u5f3a DNS over HTTPS \u90e8\u7f72\u65b9\u9762\u53d1\u6325\u5173\u952e\u4f5c\u7528\uff1a<\/p>\n

                  \n
                1. \n

                  \u7f13\u5b58\u548c\u52a0\u901f\uff1a<\/strong> \u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u7f13\u5b58\u901a\u8fc7 DoH \u83b7\u5f97\u7684 DNS \u54cd\u5e94\u3002\u6b64\u7f13\u5b58\u53ef\u4ee5\u52a0\u5feb\u540e\u7eed DNS \u89e3\u6790\u901f\u5ea6\uff0c\u4ece\u800c\u51cf\u5c11\u6574\u4f53\u5ef6\u8fdf\u5e76\u6539\u5584\u7528\u6237\u4f53\u9a8c\u3002<\/p>\n<\/li>\n

                2. \n

                  \u8d1f\u8f7d\u5747\u8861\uff1a<\/strong> \u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u5728\u591a\u4e2a DoH \u670d\u52a1\u5668\u4e4b\u95f4\u5206\u53d1 DNS over HTTPS \u67e5\u8be2\uff0c\u786e\u4fdd\u9ad8\u6548\u5229\u7528\u5e76\u5e73\u8861 DoH \u57fa\u7840\u8bbe\u65bd\u4e0a\u7684\u8d1f\u8f7d\u3002<\/p>\n<\/li>\n

                3. \n

                  \u8fc7\u6ee4\u548c\u8bb0\u5f55\uff1a<\/strong> \u53ef\u4ee5\u914d\u7f6e\u4ee3\u7406\u670d\u52a1\u5668\u6765\u8fc7\u6ee4\u7279\u5b9a\u7684 DNS \u8bf7\u6c42\u6216\u8bb0\u5f55 DNS \u6d41\u91cf\uff0c\u4e3a\u7ba1\u7406\u5458\u63d0\u4f9b\u6709\u5173\u7f51\u7edc\u5185 DNS \u4f7f\u7528\u60c5\u51b5\u7684\u5b9d\u8d35\u89c1\u89e3\u3002<\/p>\n<\/li>\n

                4. \n

                  \u9690\u79c1\u548c\u533f\u540d\uff1a<\/strong> \u901a\u8fc7\u5728\u5ba2\u6237\u7aef\u548c DoH \u89e3\u6790\u5668\u4e4b\u95f4\u4f7f\u7528\u4ee3\u7406\u670d\u52a1\u5668\uff0c\u7528\u6237\u53ef\u4ee5\u5411 DoH \u89e3\u6790\u5668\u9690\u85cf\u81ea\u5df1\u7684\u771f\u5b9e IP \u5730\u5740\uff0c\u4ece\u800c\u8fdb\u4e00\u6b65\u589e\u5f3a\u9690\u79c1\u548c\u533f\u540d\u6027\u3002<\/p>\n<\/li>\n

                5. \n

                  \u5730\u7406\u4f4d\u7f6e\u548c\u5185\u5bb9\u8bbf\u95ee\uff1a<\/strong> \u4ee3\u7406\u670d\u52a1\u5668\u8fd8\u53ef\u4ee5\u901a\u8fc7\u4f4d\u4e8e\u4e0d\u540c\u5730\u533a\u7684\u670d\u52a1\u5668\u8def\u7531 DNS over HTTPS \u8bf7\u6c42\uff0c\u4e3a\u7528\u6237\u63d0\u4f9b\u5bf9\u53d7\u5730\u7406\u9650\u5236\u7684\u5185\u5bb9\u7684\u8bbf\u95ee\u3002<\/p>\n<\/li>\n<\/ol>\n

                  \u5c06\u4ee3\u7406\u670d\u52a1\u5668\u5408\u5e76\u5230 DNS over HTTPS \u8bbe\u7f6e\u4e2d\u53ef\u4ee5\u4f18\u5316\u6027\u80fd\u3001\u63d0\u9ad8\u5b89\u5168\u6027\u5e76\u63d0\u4f9b\u989d\u5916\u7684\u63a7\u5236\u548c\u81ea\u5b9a\u4e49\u9009\u9879\u3002<\/p>\n

                  \u76f8\u5173\u94fe\u63a5<\/h2>\n

                  \u6709\u5173 DNS over HTTPS\uff08DoH\uff09\u7684\u66f4\u591a\u4fe1\u606f\uff0c\u53ef\u4ee5\u53c2\u8003\u4ee5\u4e0b\u8d44\u6e90\uff1a<\/p>\n

                    \n
                  1. \u4e92\u8054\u7f51\u5de5\u7a0b\u4efb\u52a1\u7ec4 (IETF) \u6709\u5173 HTTPS \u4e0a\u7684 DNS \u7684\u8349\u6848\uff1a https:\/\/datatracker.ietf.org\/doc\/draft-ietf-doh-dns-over-https\/<\/a><\/li>\n
                  2. Mozilla \u5f00\u53d1\u8005\u7f51\u7edc (MDN) \u2013 DNS over HTTPS (DoH) \u7b80\u4ecb\uff1a https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/HTTP\/Overview_of_DNS_over_HTTPS<\/a><\/li>\n
                  3. Google \u5f00\u53d1\u8005 \u2013 DNS over HTTPS (DoH) \u8bf4\u660e\uff1a https:\/\/developers.google.com\/speed\/public-dns\/docs\/doh<\/a><\/li>\n<\/ol>\n

                    \u603b\u4e4b\uff0cDNS over HTTPS (DoH) \u662f\u4fdd\u62a4 DNS \u901a\u4fe1\u548c\u4fdd\u62a4\u4e92\u8054\u7f51\u7528\u6237\u9690\u79c1\u7684\u4e00\u9879\u91cd\u8981\u8fdb\u6b65\u3002\u901a\u8fc7\u4f7f\u7528 HTTPS \u52a0\u5bc6 DNS \u67e5\u8be2\uff0cDoH \u53ef\u786e\u4fdd\u7528\u6237\u7684 DNS \u8bf7\u6c42\u4fdd\u6301\u673a\u5bc6\u5e76\u514d\u53d7\u5404\u79cd\u5a01\u80c1\u3002\u968f\u7740 DoH \u4e0d\u65ad\u53d1\u5c55\u5e76\u83b7\u5f97\u5e7f\u6cdb\u652f\u6301\uff0c\u5b83\u6709\u53ef\u80fd\u6210\u4e3a\u672a\u6765\u4e92\u8054\u7f51\u5b89\u5168\u7684\u6807\u51c6\u529f\u80fd\u3002\u5c06\u4ee3\u7406\u670d\u52a1\u5668\u4e0e DNS over HTTPS \u7ed3\u5408\u8d77\u6765\u53ef\u4ee5\u8fdb\u4e00\u6b65\u4f18\u5316\u6027\u80fd\uff0c\u5e76\u4e3a\u7ec4\u7ec7\u548c\u4e2a\u4eba\u7528\u6237\u63d0\u4f9b\u5bf9 DNS \u89e3\u6790\u7684\u589e\u5f3a\u63a7\u5236\u3002<\/p>","protected":false},"featured_media":468245,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-476910","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about DNS over HTTPS (DoH): Securing DNS Requests with Enhanced Privacy<\/mark>","faq_items":[{"question":"What is DNS over HTTPS (DoH)?","answer":"

                    DNS over HTTPS (DoH) is a protocol that enhances the security and privacy of DNS requests by encrypting them using HTTPS (Hypertext Transfer Protocol Secure). It ensures that your DNS queries remain confidential and protected from interception or manipulation.<\/p>"},{"question":"How did DNS over HTTPS (DoH) originate?","answer":"

                    The concept of encrypting DNS traffic gained significant attention when it was first proposed by Patrick McManus of Mozilla in October 2017. Since then, the protocol has undergone refinements and iterations, becoming widely accepted and adopted.<\/p>"},{"question":"How does DNS over HTTPS (DoH) work?","answer":"

                    DNS over HTTPS operates by encrypting DNS queries and responses in HTTPS packets, which are then sent to and received from specialized DoH servers. This end-to-end encryption secures your DNS communication and protects against various DNS-based attacks.<\/p>"},{"question":"What are the key features of DNS over HTTPS (DoH)?","answer":"

                    DNS over HTTPS offers end-to-end encryption, improved privacy, enhanced security against interception, and compatibility with a wide range of platforms and operating systems. It also enables circumvention of DNS filtering and censorship.<\/p>"},{"question":"What types of DNS over HTTPS (DoH) exist?","answer":"

                    There are two main types of DoH deployments: Public DoH Resolvers, operated by service providers for public use, and Private DoH Resolvers, set up within an organization's network infrastructure to enhance internal DNS resolution security.<\/p>"},{"question":"How can I use DNS over HTTPS (DoH)?","answer":"

                    You can use DNS over HTTPS in several ways:<\/p>

                    1. Enable it in modern web browsers like Mozilla Firefox and Google Chrome.<\/li>
                    2. Configure it system-wide in some operating systems.<\/li>
                    3. Utilize third-party applications that support DoH independently.<\/li><\/ol>"},{"question":"What are the challenges and solutions related to DNS over HTTPS (DoH) usage?","answer":"

                      Challenges include potential incompatibility, security concerns with untrusted DoH resolvers, bypassing DNS filtering, and potential difficulties in local network management. Solutions involve selecting reputable DoH service providers and carefully planning DoH deployments.<\/p>"},{"question":"What are the future perspectives of DNS over HTTPS (DoH)?","answer":"

                      As DoH adoption continues to grow, we can expect increased support, encrypted SNI, implementation in IoT devices, standardization, and regulations to ensure secure and consistent usage.<\/p>"},{"question":"How can proxy servers be associated with DNS over HTTPS (DoH)?","answer":"

                      Proxy servers can enhance DoH deployments by caching and accelerating DNS responses, load balancing queries, providing filtering and logging capabilities, improving privacy and anonymity, and assisting with content access and geolocation.<\/p>"},{"question":"Where can I find more information about DNS over HTTPS (DoH)?","answer":"

                      For further details, you can refer to the following resources:<\/p>

                      1. Internet Engineering Task Force (IETF) Draft on DNS over HTTPS: https:\/\/datatracker.ietf.org\/doc\/draft-ietf-doh-dns-over-https\/<\/a><\/li>
                      2. Mozilla Developer Network (MDN) - Introduction to DNS over HTTPS (DoH): https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/HTTP\/Overview_of_DNS_over_HTTPS<\/a><\/li>
                      3. Google Developers - DNS over HTTPS (DoH) Explained: https:\/\/developers.google.com\/speed\/public-dns\/docs\/doh<\/a><\/li><\/ol>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki\/476910","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki\/476910\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/media\/468245"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/media?parent=476910"}],"curies":[{"name":"\u53ef\u6e7f\u6027\u7c89\u5242","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}