there are three parts to this dns-over-https server:
- an nginx server to handle https requests from clients
- a service to rewrite http requests to dns requests
unbound
to resolve the dns query
only the nginx server stores any logging. logging on the server is kept very minimal.
this is what the nginx access log looks like:
[10/Aug/2019:19:20:31 +0000] "POST /dns-query HTTP/1.1" 200 95 "-"
[10/Aug/2019:19:20:31 +0000] "POST /dns-query HTTP/1.1" 200 83 "-"
[10/Aug/2019:19:20:45 +0000] "POST /dns-query HTTP/1.1" 200 119 "-"
[10/Aug/2019:19:20:45 +0000] "POST /dns-query HTTP/1.1" 200 107 "-"
[10/Aug/2019:19:20:58 +0000] "POST /dns-query HTTP/1.1" 200 83 "-"
[10/Aug/2019:19:21:06 +0000] "POST /dns-query HTTP/1.1" 200 134 "-"
[10/Aug/2019:19:21:12 +0000] "POST /dns-query HTTP/1.1" 200 83 "-"
[10/Aug/2019:19:21:12 +0000] "POST /dns-query HTTP/1.1" 200 95 "-"
[10/Aug/2019:19:21:14 +0000] "POST /dns-query HTTP/1.1" 200 83 "-"
[10/Aug/2019:19:21:14 +0000] "POST /dns-query HTTP/1.1" 200 95 "-"
[10/Aug/2019:19:21:14 +0000] "POST /dns-query HTTP/1.1" 200 83 "-"
[10/Aug/2019:19:21:14 +0000] "POST /dns-query HTTP/1.1" 200 95 "-"
i store this log in order to carry out basic debugging. it will also allow me to plan for capacity and upgrades in the future.