blackbox_exporter icon indicating copy to clipboard operation
blackbox_exporter copied to clipboard

Published 20 hours ago • verified publisher icon prometheus

Feature Request: DNSCrypt support

Open muety opened this issue 3 years ago • 3 comments

I don't know how easy this can be accomplished. But after having support for DNS-over-TLS (#643) probes, it might be convenient to also be able to probe DNSCrypt endpoints.

muety avatar Oct 01 '20 10:10 muety

I've not heard of this, and it looks like it was never submitted to the IETF which is a bit odd. Does the DNS library we use support this?

brian-brazil avatar Oct 01 '20 10:10 brian-brazil

I'm not an expert myself, but there are discussion about DNSCrypt vs. DoT. Also, there's the widely used dnscrypt-proxy. However, as you already pointed out, DNSCrypt has not made it to an official standard, yet.

Does the DNS library we use support this?

There was short discussion about it, but apparently nobody took the initiative to implement it, yet. I assume that's a dealbreaker for blackbox exporter to support it?

muety avatar Oct 01 '20 10:10 muety

I assume that's a dealbreaker for blackbox exporter to support it?

Yes, what is essentially application-specific code doesn't belong in this exporter. It's intended to cover very basic standard stuff.

brian-brazil avatar Oct 01 '20 10:10 brian-brazil