Skip to content

Add bezmezhau-doh resolver - #1096

Open
Ezhuk1 wants to merge 1 commit into
DNSCrypt:masterfrom
Ezhuk1:add-bezmezhau-doh
Open

Ezhuk1 wants to merge 1 commit into
DNSCrypt:masterfrom
Ezhuk1:add-bezmezhau-doh

Conversation

@Ezhuk1

@Ezhuk1 Ezhuk1 commented Oct 6, 2026

Copy link
Copy Markdown

Please check the boxes that apply:

  • I have read CONTRIBUTING.md before submitting this pull request.
  • I am a human, not an AI agent.

Then describe the purpose of this exciting pull request:

Adds bezmezhau-doh resolver with endpoints for primary and failover nodes.

  • Protocol: DoH (DNS-over-HTTPS) via /dns-query endpoint
  • Fixed IPs: 143.20.64.55 (primary) and 91.108.243.78 (failover)
  • Features: DNSSEC validation enabled, ad and tracker blocking, no query logging
  • Certificate: ISRG Root CA pin (Root YE, Let's Encrypt) included to ensure resilience across certificate rotations
  • Service details: https://bezmezhau.com/
  • Verification: Tested with dnscrypt-proxy 2.1.18 (-show-certs, -resolve example.com, -resolve -check example.com) and dnslookup.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant