public
/
nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

nixos/test/unbound: add tests for DNS over HTTPS

This commit is contained in:
Daniel Nagy 2021-02-13 23:21:01 +01:00 committed by tomberek
parent bd6ef5bee1
commit 930e3679f4
1 changed files with 15 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
nixos/tests/unbound.nix
View File

@ -27,6 +27,9 @@ import ./make-test-python.nix ({ pkgs, lib, ... }:
# disable the root anchor update as we do not have internet access during # disable the root anchor update as we do not have internet access during
# the test execution # the test execution
services.unbound.enableRootTrustAnchor = false; services.unbound.enableRootTrustAnchor = false;
# we want to test the full-variant of the package to also get DoH support
services.unbound.package = pkgs.unbound-full;
}; };
}; };
@ -81,13 +84,16 @@ import ./make-test-python.nix ({ pkgs, lib, ... }:
networking.firewall.allowedTCPPorts = [ networking.firewall.allowedTCPPorts = [
53 # regular DNS 53 # regular DNS
853 # DNS over TLS 853 # DNS over TLS
443 # DNS over HTTPS
]; ];
networking.firewall.allowedUDPPorts = [ 53 ]; networking.firewall.allowedUDPPorts = [ 53 ];
services.unbound = { services.unbound = {
enable = true; enable = true;
allowedAccess = [ "192.168.0.0/24" "fd21::/64" "::1" "127.0.0.0/8" ]; allowedAccess = [ "192.168.0.0/24" "fd21::/64" "::1" "127.0.0.0/8" ];
interfaces = [ "::1" "127.0.0.1" "192.168.0.2" "fd21::2" "192.168.0.2@853" "fd21::2@853" "::1@853" "127.0.0.1@853" ]; interfaces = [ "::1" "127.0.0.1" "192.168.0.2" "fd21::2"
"192.168.0.2@853" "fd21::2@853" "::1@853" "127.0.0.1@853"
"192.168.0.2@443" "fd21::2@443" "::1@443" "127.0.0.1@443" ];
forwardAddresses = [ forwardAddresses = [
(lib.head nodes.authoritative.config.networking.interfaces.eth1.ipv6.addresses).address (lib.head nodes.authoritative.config.networking.interfaces.eth1.ipv6.addresses).address
(lib.head nodes.authoritative.config.networking.interfaces.eth1.ipv4.addresses).address (lib.head nodes.authoritative.config.networking.interfaces.eth1.ipv4.addresses).address
@ -217,6 +223,14 @@ import ./make-test-python.nix ({ pkgs, lib, ... }:
expected, expected,
["+tcp", "+tls"] + args, ["+tcp", "+tls"] + args,
) )
query(
machine,
remote,
query_type,
zone,
expected,
["+https"] + args,
)
client.start() client.start()