Skip to content

bug: all "Unstoppable Domains" (.crypto) DoH resolvers are down #772

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
lidel opened this issue Dec 23, 2024 · 3 comments
Open

bug: all "Unstoppable Domains" (.crypto) DoH resolvers are down #772

lidel opened this issue Dec 23, 2024 · 3 comments
Labels
kind/bug A bug in existing code (including security flaws) need/community-input Needs input from the wider community P3 Low: Not priority right now

Comments

@lidel
Copy link
Member

lidel commented Dec 23, 2024

This is similar to #771 but at the time of writing this all UD DoH resolvers seem to be down, breaking DNSLink websites loaded via boxo/gateway if the domain name uses the .crypto TLD.

Current implicit default is Cloudflare at https://resolver.cloudflare-eth.com/dns-query and it stopped returning DNSLink results earlier today (filled support ticket to CF).

The "official" DoH at https://resolver.unstoppable.io/dns-query just hangs and timeouts.

I guess we wait for Cloudflare fix, but if that does not start working we need to consider altenatives (are there any? removal?)

Update: see #772 (comment)

@lidel lidel added kind/bug A bug in existing code (including security flaws) need/triage Needs initial labeling and prioritization labels Dec 23, 2024
@lidel lidel changed the title bug: all "Unstoppable Domains" DoH resolvers are down bug: all "Unstoppable Domains" (.crypto) DoH resolvers are down Dec 23, 2024
@lidel
Copy link
Member Author

lidel commented Dec 23, 2024

Friendly ping to https://github.com/orgs/unstoppabledomains/people: @nickshatilo @bonsaiben

How does DoH story look like for UD? Should we keep defaulting to Cloudflare (assuming its fixed soon)?
We would prefer using https://resolver.unstoppable.io/dns-query directly, but it seems to be offline.

I'm testing with:

$ curl 'https://resolver.unstoppable.io/dns-query?name=_dnslink.test.crypto&type=TXT' -H 'accept: application/dns-json' -v
* Host resolver.unstoppable.io:443 was resolved.
* IPv6: (none)
* IPv4: 3.33.139.32
*   Trying 3.33.139.32:443...
* ALPN: curl offers h2,http/1.1
* TLSv1.3 (OUT), TLS handshake, Client hello (1):

and just hangs.

Team is on holiday, but we would like to resolve this in January (either fix .crypto, or remove default resolver.cloudflare-eth.com if not fixed by then)

@lidel
Copy link
Member Author

lidel commented Jan 7, 2025

As noted in #771 (comment) now redirects to https://dns.eth.link/dns-query, which does not support UD (.crypto) domains.

We are planning to replace default resolver with https://resolver.unstoppable.io/dns-query giving UD community a chance to get their act together and fix the DNS bridge at the domain name they control:

If this does not happen and the DoH resolver at https://resolver.unstoppable.io/dns-query remains broken in Q1, we will remove the implicit resolver for .crypto.

lidel added a commit that referenced this issue Jan 7, 2025
Cloudflare decomissionned their resolver and started redirecting
(HTTP 308) to https://dns.eth.link/dns-query which is an alias for
eth.limo.

That endpoint does not support resolving DNSLink of .crypto TLD and
always returns no results.

This change switched to DoH resolver provided by UD project.

Closes #772
lidel added a commit that referenced this issue Jan 8, 2025
fix(gateway): update DoH resolver for .crypto TLD

Cloudflare decomissionned their resolver and started redirecting
(HTTP 308) to https://dns.eth.link/dns-query which is an alias for
eth.limo.

That endpoint does not support resolving DNSLink of .crypto TLD and
always returns no results.

This change switched to DoH resolver provided by UD project.

See  #772 for more info and the future of .crypto resolver
@lidel
Copy link
Member Author

lidel commented Jan 8, 2025

Cloudflare decommissioned their ENS and UD resolver:

Ref. https://developers.cloudflare.com/fundamentals/api/reference/deprecations/#2025-07-01:
image

It no longer resolves .crypto correctly, which means boxo/gateway is no longer able to resolve .crypto domains.

#782 switched boxo to use https://resolver.unstoppable.io/dns-query, allowing UD community to fix the issue without our involvement.

We will keep this issue open for next 6 months, if https://resolver.unstoppable.io/dns-query is not fixed till then, support for (currently broken) .crypto TLD resolution will be removed.

@lidel lidel added P3 Low: Not priority right now need/community-input Needs input from the wider community and removed need/triage Needs initial labeling and prioritization labels Jan 8, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/bug A bug in existing code (including security flaws) need/community-input Needs input from the wider community P3 Low: Not priority right now
Projects
None yet
Development

No branches or pull requests

1 participant