Toy DNS over HTTPS server.
https://dns.maze.network/dns-query
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
104 lines
2.4 KiB
104 lines
2.4 KiB
package doh
|
|
|
|
import "net"
|
|
|
|
// RFC6890
|
|
var localIPv4Nets = []net.IPNet{
|
|
// This host on this network
|
|
net.IPNet{
|
|
net.IP{0, 0, 0, 0},
|
|
net.IPMask{255, 0, 0, 0},
|
|
},
|
|
// Private-Use Networks
|
|
net.IPNet{
|
|
net.IP{10, 0, 0, 0},
|
|
net.IPMask{255, 0, 0, 0},
|
|
},
|
|
// Shared Address Space
|
|
net.IPNet{
|
|
net.IP{100, 64, 0, 0},
|
|
net.IPMask{255, 192, 0, 0},
|
|
},
|
|
// Loopback
|
|
net.IPNet{
|
|
net.IP{127, 0, 0, 0},
|
|
net.IPMask{255, 0, 0, 0},
|
|
},
|
|
// Link Local
|
|
net.IPNet{
|
|
net.IP{169, 254, 0, 0},
|
|
net.IPMask{255, 255, 0, 0},
|
|
},
|
|
// Private-Use Networks
|
|
net.IPNet{
|
|
net.IP{172, 16, 0, 0},
|
|
net.IPMask{255, 240, 0, 0},
|
|
},
|
|
// DS-Lite
|
|
net.IPNet{
|
|
net.IP{192, 0, 0, 0},
|
|
net.IPMask{255, 255, 255, 248},
|
|
},
|
|
// 6to4 Relay Anycast
|
|
net.IPNet{
|
|
net.IP{192, 88, 99, 0},
|
|
net.IPMask{255, 255, 255, 0},
|
|
},
|
|
// Private-Use Networks
|
|
net.IPNet{
|
|
net.IP{192, 168, 0, 0},
|
|
net.IPMask{255, 255, 0, 0},
|
|
},
|
|
// Reserved for Future Use & Limited Broadcast
|
|
net.IPNet{
|
|
net.IP{240, 0, 0, 0},
|
|
net.IPMask{240, 0, 0, 0},
|
|
},
|
|
}
|
|
|
|
// RFC6890
|
|
var localIPv6Nets = []net.IPNet{
|
|
// Unspecified & Loopback Address
|
|
net.IPNet{
|
|
net.IP{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00},
|
|
net.IPMask{0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xfe},
|
|
},
|
|
// Discard-Only Prefix
|
|
net.IPNet{
|
|
net.IP{0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00},
|
|
net.IPMask{0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00},
|
|
},
|
|
// Unique-Local
|
|
net.IPNet{
|
|
net.IP{0xfc, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00},
|
|
net.IPMask{0xfe, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00},
|
|
},
|
|
// Linked-Scoped Unicast
|
|
net.IPNet{
|
|
net.IP{0xfe, 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00},
|
|
net.IPMask{0xff, 0xc0, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00},
|
|
},
|
|
}
|
|
|
|
func isGlobalIP(ip net.IP) bool {
|
|
if ip == nil {
|
|
return false
|
|
}
|
|
if ipv4 := ip.To4(); len(ipv4) == net.IPv4len {
|
|
for _, cidr := range localIPv4Nets {
|
|
if cidr.Contains(ip) {
|
|
return false
|
|
}
|
|
}
|
|
return true
|
|
}
|
|
if len(ip) == net.IPv6len {
|
|
for _, cidr := range localIPv6Nets {
|
|
if cidr.Contains(ip) {
|
|
return false
|
|
}
|
|
}
|
|
return true
|
|
}
|
|
return true
|
|
}
|