A simple DNS over HTTPS client for the command line.
This is a simple DoH python client (RFC 8484, GET), which supports plain (default) and json output.
pip3 install doh-clior upgrade to latest version by
pip install --upgrade doh-cliIt's based & tested on Python 3.
If you want to contribute, you can clone the repository and install all dependencies locally:
pip3 install .doh-cli libredns.gr Adoh-cli --help- A
- AAAA
- CNAME
- MX
- NS
- SOA
- SPF
- SRV
- TXT
- CAA
- DNSKEY
- DS
- LibreDNS
- Cloudflare
- Quad9
- CleanBrowsing
- CIRA
- SecureDNS
- you may also provide your own DoH server URL
- libredns (default)
- libredns-ads (LibreDNS No-Trackers/Ads)
- cloudflare
- quad9
- cleanbrowsing (blocks access to adult, pornographic and explicit sites, also VPNs)
- cleanbrowsing-secure (blocks access to phishing, malware and malicious domains)
- cleanbrowsing-adult (blocks access to all adult, pornographic and explicit sites)
- cira (CIRA's Canadian Shield)
- cira-protect (Malware and phishing protection)
- cira-family (blocking pornographic content plus protected)
- securedns
- securedns-ads (blockign ads, malware and phishing)
doh-cli libredns.gr A116.202.176.26in json
doh-cli libredns.gr A --json[{"Query": "libredns.gr.", "TTL": "366", "RR": "A", "Answer": "116.202.176.26"}]you can use jq to format, parse output:
doh-cli libredns.gr A --json | jq .[
{
"Query": "libredns.gr.",
"TTL": "54",
"RR": "A",
"Answer": "116.202.176.26"
}
]doh-cli example.org AAAA
2606:2800:220:1:248:1893:25c8:1946doh-cli example.org AAAA --json | jq .
[
{
"Query": "example.org.",
"TTL": "45832",
"RR": "AAAA",
"Answer": [
"2606:2800:220:1:248:1893:25c8:1946"
]
}
]
doh-cli www.libredns.gr CNAME --json | jq .[
{
"Query": "www.libredns.gr.",
"TTL": "600",
"RR": "CNAME",
"Answer": "libredns.gr."
}
]doh-cli libreops.cc MX --json | jq .[
{
"Query": "libreops.cc.",
"TTL": "10794",
"RR": "MX",
"Answer": [
"10",
"spool.mail.gandi.net.",
"libreops.cc.",
"10794",
"IN",
"MX",
"50",
"fb.mail.gandi.net."
]
}
]doh-cli libredns.gr CAA --json[{"Query": "libredns.gr.", "TTL": "590", "RR": "CAA", "Answer": ["0", "issue", "\"letsencrypt.org\""]}]DNS Key record The key record used in DNSSEC. Uses the same format as the KEY record.
doh-cli DNSKEY nasa.gov
256 3 8 AwEAAd86yGbz2WUp4VqClb1svSW9oyx0 CQqCCGebNIEEqbXsF5PtCz225RKL3cDr mPHIeSETR6iUvfPSDiKquYearoLFmPjU 0q1AJJmrZIzl9rDgMx/c9OPJxBnhp196 ntJEaGySgXSoaXQEdUpm8lZzhkjftTfC X9mwDY2abxa3Vq3t
256 3 8 AwEAAa/Jh5zZ/apbhzIG6CEUT8LL+WNK +HuVLbFf/pxk5Q/Qmng08J1+24B5ObWK +lUNGHN/FYC0TVbbofeHHOLVS88CBmK9 Zu5RWqDicYYKFu8vra+MXEcwLc6E0fTf R9I/OAIWF6GScPHnkq8GoK2qau8gSD96 UsAw6mCsWEqdyqof
257 3 8 AwEAAbo7ImTCXl2KuV8NK+0zEvLC+OrN M0/6rT/kKZncFc0CqIIQwZUJtdurpvi3 mUFY0J6Pv394E2gu/OLOe+EcIRatjxSv KITBM+PJTJq0OtwsGtBQyu4uU8hS2SNE g1hEJVGHE5q5LWIAy01TBnibyGOyVJE4 N3M50ezp4E7DqEYG6WkhZQxLDjn0T4ex KPDqIkP+QUB6OwF2CWKtWtpPIpI1i9h9 OgIWUfXb3uLEgcnJlAYYAf9Jw35hPPDo FP+Zi9fJ4mQ0olm8gj4668QZoCJ57MDr 3p3Rntfw5Ca+AQVNwnaqcB7iUWHYPZP0 KLk7V02NloWXpwNHOA8O1TsOYtc=
Delegation signer The record used to identify the DNSSEC signing key of a delegated zone
doh-cli nasa.gov DS --output=json | jq .
[
{
"Query": "nasa.gov.",
"TTL": "3588",
"RR": "DS",
"Answer": [
"41452",
"8",
"2",
"7490b7f47af44d4c0bed3a7a2fefeb50cf55e3209e5a82e30a44f9d4aa9ae688"
]
}
]
[
{
"Query": "nasa.gov.",
"TTL": "3588",
"RR": "DS",
"Answer": [
"41452",
"8",
"1",
"83bb6c5ac559bbe1e8b17a98465145265a3cafc4"
]
}
]Using --dnssec sets the EDNS DO flag. The response will then include the DNSSEC signature for the requested record set.
doh-cli A nasa.gov --dnssec
52.0.14.116
23.22.39.120
8 2 600 20210325164559 20210223160609 6816 nasa.gov. HqVx19SOdF4Mx2+UZl7rhecv99zJdj07 86R7sAAXP2poG5QDa9zpYz7WXz/y2UtV HpMk+0gfb2SrxQ1p93+VWs0S2UxnwZQI 8qtwuB6/9780LVLa8ZHEDVZzdO1NAAx1 AfaaQ0FjoxErPipPBi4edvMSYjnvVhY+ 0baRH2i1syk=doh-cli libredns.gr A116.202.176.26doh-cli libredns.gr A --verbose116.202.176.26
Verbose: https://doh.libredns.gr/dns-query?dns=lSIBAAABAAAAAAAACGxpYnJlZG5zAmdyAAABAAEdoh-cli test.libredns.gr A --debug116.202.176.26
Debug: id 24169
opcode QUERY
rcode NOERROR
flags QR RD RA
;QUESTION
test.libredns.gr. IN A
;ANSWER
test.libredns.gr. 3600 IN A 116.202.176.26
;AUTHORITY
libredns.gr. 1822 IN SOA ns1.gandi.net. hostmaster.gandi.net. 1582812814 10800 3600 604800 10800
;ADDITIONALdoh-cli test.libredns.gr A --time116.202.176.26
Query time: 531.764doh-cli test.libredns.gr --time --json | jq .[
{
"Query": "test.libredns.gr.",
"TTL": "3600",
"RR": "A",
"Answer": [
"116.202.176.26"
]
},
{
"Query Time": "476.537"
}
]Disclaimer: This value is related to the client request towards the DoH provider, not the actual dns response.
doh-cli libredns.gr A --dns cloudflare116.202.176.26or you can use LibreDNS Block Trackers endpoint:
doh-cli --dns libredns-ads analytics.google.com A0.0.0.0or provide your own DoH url:
doh-cli --url https://doh.libredns.gr/dns-query www.example.com A93.184.216.34Notice: This option (--url) overrides the --dns option.