Akiiia GitHub avatar

cloudflare-doh-ecs

Akiiia

A DNS-over-HTTPS service deployed on Cloudflare Workers that supports domestic/international domain splitting, EDNS Client Subnet (ECS), and upstream fallback.

Stars

11

7-day growth

No data

Forks

11

Open issues

0

License

MIT

Last updated

2026-07-28

AI repository intelligence
FR-AI / ANALYSIS

Why it is worth attention

It provides a privacy-respecting, self-hosted DoH resolver with automatic domain rule updates from a reputable source, ECS masking, and no logging of complete queries or client IPs.

Who it is for

  • Cloudflare Workers users
  • Privacy-conscious individuals
  • Developers in regions with DNS restrictions
  • Self-hosted DNS enthusiasts

Use cases

  • Private DoH endpoint for personal devices
  • Bypassing DNS censorship or pollution
  • Improving DNS resolution speed for domestic vs. global domains
  • Learning or testing Cloudflare Workers with KV and Cron Triggers

Strengths

  • RFC 8484 compliant (GET & POST)
  • Automatic daily update of domestic domain rules via Workers KV and Cron
  • ECS support with proper subnet masking (/24 for IPv4, /56 for IPv6)
  • No logging of full domain names or client IPs

Considerations

  • Requires a custom domain or CDN in restricted networks where .workers.dev is inaccessible
  • Worst-case response time up to ~6 seconds if both primary and fallback upstreams timeout
  • No built-in abuse protection; public deployment needs additional WAF or rate limiting

README quick start

Cloudflare DoH ECS

一个部署在 Cloudflare Workers 上的 DNS-over-HTTPS 服务，支持国内外域名分流、ECS 和上游故障回退。

相关链接

功能

  • 支持 RFC 8484 DoH GET 和 POST 请求
  • 国内域名使用 AliDNS，失败后回退腾讯 DNSPod
  • 其他域名使用 Google DNS，失败后回退 Cloudflare DNS
  • 默认启用 ECS：IPv4 固定使用 /24，IPv6 固定使用 /56
  • 国内域名规则通过 Workers KV 和 Cron Trigger 自动更新
  • 不记录完整查询域名和客户端 IP

部署

点击上方 Deploy to Cloudflare 按钮，授权 Cloudflare 访问 GitHub。系统会复制项目模板，并在你的 GitHub 账户下创建一个独立的部署仓库。 Cloudflare 会通过该仓库自动创建并部署 Worker、KV 命名空间以及每日规则更新任务。

部署完成后打开详情页-域-启用

DoH 地址：

https:///doh

首次查询会自动下载并初始化国内域名规则。

默认上游

分组主上游备用上游
国内域名AliDNS腾讯 DNSPod
其他域名Google DNSCloudflare DNS

主上游出现网络错误、超时、异常响应或 DNS SERVFAIL 时，才会尝试同组备用上游；不会在国内和国外分组之间回退。

配置

所有配置都有默认值，一键部署时无需修改。

变量默认值
DOH_PATH/doh
DOMESTIC_DOH_URLhttps://dns.alidns.com/dns-query
DOMESTIC_FALLBACK_DOH_URLhttps://doh.pub/dns-query
GLOBAL_DOH_URLhttps://dns.google/dns-query
GLOBAL_FALLBACK_DOH_URLhttps://cloudflare-dns.com/dns-query

国内域名规则来自 Loyalsoldier/v2ray-rules-dat 的 direct-list.txt，每天自动更新。

注意

  • 部分受限网络环境无法访问 .workers.dev 域名，需绑定自有域名或另外使用 CDN 以达到加速访问目的。
  • ECS 地址优先取自 X-Forwarded-For 中最左侧的合法公网 IP；没有有效地址时回退到 CF-Connecting-IP，并自动掩码为 IPv4 /24 或 IPv6 /56。
  • 每个上游超时为 3 秒；主备均超时时，最坏等待约 6 秒。
  • 本项目不提供公共 DNS 服务的滥用防护，公开部署时建议配合 Cloudflare WAF 或限速规则。

本地开发

需要 Node.js 20 或更高版本。

npm install
npm run typecheck
npm test
npm run deploy:dry-run

许可证

MIT

Description

基于 Cloudflare Workers 的 DoH 转发服务器，实现了国内外域名分流以及 ECS 查询

Related repositories

Similar projects matched by category, topics, and programming language.

deerwork-ai
Featured
deerwork-ai GitHub avatar

deer-workflow

An open-source Dynamic Workflow runtime that combines deterministic TypeScript orchestration with replaceable Agent runtimes.

AI & Machine LearningLarge Language Models
312
yaojingang
Featured
yaojingang GitHub avatar

TokHub

TokHub is an open-source monitoring, recommendation, and OpenAI-compatible gateway system for AI API intermediaries, combining public status pages, supplier rankings, user workspaces, layered probing, metering, alerts, encrypted keys, and Docker self-hosting.

AI & Machine LearningBackend & APIs
189
S40911120
Featured
S40911120 GitHub avatar

recensa

Recensa is a self-hosted web viewer that indexes Claude Code session transcripts into a local SQLite database, enabling full-text search, replay, and audit of all past agent conversations without uploading data anywhere.

AI & Machine LearningLarge Language Models
67