SRE task : write a DNS proxy that listens to conventional DNS and sends it over TLS

Background of the problem
Nowadays, some providers (such as Cloudflare) provide a DNS-over-TLS feature that could let
us enhance privacy by encrypting our DNS queries.
Our applications dont handle DNS-over-TLS by default. Your task is to design and create a
simple DNS to DNS-over-TLS proxy that we could use to enable our application to query a
DNS-over-TLS server.


Requirements
From your understanding of the topic, we would expect a working example of a DNS to
DNS-over-TLS proxy that can:
1. Handle at least one DNS query , and give a result to the client.
2. Work over TCP and talks to a DNS-over-TLS server that works over TCP (e.g: Cloudflare).


Deliverables
1. The source code .
2. A Dockerfile , and the different options required to run your software.
3. A README.md file detailing your implementation, your choices, and answering the
following questions:
- What are the security concerns for this kind of service?
- Considering a microservice architecture; how would you see this the dns to
dns-over-tls proxy used?
- What other improvements do you think would be interesting to add to the project?
Note that there is no requirement regarding the language you use, but you are required to write
the code yourself! This means that you cannot use already written software.

Reference for help:
https://developers.cloudflare.com/1.1.1.1/dns-over-tls/ >> You can use Cloudflares DNS-over-TLS
feature to test your queries.


Additionally try including this feature as well:
Least to see you give these features a try:
- Allow multiple incoming requests at the same time
- Also handle UDP requests, while still querying tcp on the other side .
About the recuiter
Member since Mar 14, 2020
Eee Sympo
from Bahia, Brazil

---

---

Looking for help? Checkout our video tutorial
How to search and apply for jobs

How to apply? Do you have more questions about the Job?
See frequently asked questions