Jun Kurihara (栗原 淳)
This is a web site introducing a new concept of anonymized DNS, called Mutualized Oblivious DNS (μODNS). Our implementation, public servers and their detailed information are given below.”
Jun Kurihara, Toshiaki Tanaka, and Takeshi Kubo, “μODNS: A Distributed Approach to DNS Anonymization with Collusion Resistance,” Computer Networks, Elsevier, vol. 237, p. 110078, Dec. 2023. [Online] Available at https://doi.org/10.1016/j.comnet.2023.110078.
Jun Kurihara and Takeshi Kubo, “Mutualized oblivious DNS (μODNS): Hiding a tree in the wild forest,” https://arxiv.org/abs/2104.13785v3, Jun. 2021
Jun Kurihara and Takeshi Kubo, “Mutualized Oblivious DNS (μODNS): Hiding a tree in the wild forest”, IEICE NS, Jul. 2021. (in Japanese) [Slideshare]
We sometimes call this ODoH-based protocol and implementation by μODoH or MODoH.
(Replaced fork of doh-server)
To protect DNS servers and relays from DoS attacks, authentication is introduced at the first hop relay. So, in addition to the above relay/target, authentication server is needed as below.
Currently we are testing its feasibility.
The work on this extension of ODoH to MoDoH is partially supported by NICT22401, JSPS KAKENHI Grant Number JP22K11994, JP21H03442, and KDDI Foundation Research Grant.
Dnscrypt protocoldnscrypt-proxy)(Source) https://github.com/junkurihara/dnscrypt-proxy-modns
(Docker) https://hub.docker.com/r/jqtype/dnscrypt-proxy-modns
encrypted-dns-server(Source) https://github.com/junkurihara/encrypted-dns-server-modns
(Docker) https://hub.docker.com/r/jqtype/encrypted-dns-server-modns
(Docker with unbound resolver) https://hub.docker.com/r/jqtype/dnscrypt-server-modns
If you want to just check if it works, you can try our DoH-μODNS translator from Chrome and Firefox browsers without using our dedicated client.
This translator converts DoH queries to PoC μODNS queries. It first works as the ‘first-hop’ relay of μODNS, and randomly choose subsequent (up to 2) relays from listed relays for user anonymity in DNS queries. The DoH address is:
Target full-service resolvers are ones listed in this repo and Quad9 servers of no-filters.
NOTE: Although our experimental resolvers and relays are ones with no log and no filter, the DoH-μODNS filters some content by using public ad lists and logs blocking histories.
Please use this translator only for testing at your own risk, and do not use this translator for your private activity. From the concept of μODNS, you should build your dedicated relay. Also note that it is not guaranteed that our translator works 24/365.