dnstls

DNS over TLS PHP Client

This is a proof of concept for DNS over TLS in PHP. It is based on the latest draft https://tools.ietf.org/html/rfc7858 and was tested against the DNSDist and Knot TLS servers. Should work with all implementations. This is a work in progress and only the A, AAAA and CNAME records are supported.

MX and NS are coming soon.

It supports CloudFlare's , Quad9's and CleanBrowsing public DNS servers by default.

Examples

This tool should be executed from the command line and it has a similar output as the host command. Example:

 $ php dnstls.php 
 Usage: dnstls.php [domain.com] [server:cloudflare,cleanbrowsing,IP] <type: A, AAAA or CNAME>


 $php dnstls.php github.com cloudflare
 github.com has address 192.30.255.113
 github.com has address 192.30.255.112

Or for IPv6:

 $ php dnstls.php sucuri.net quad9 AAAA
 sucuri.net has IPv6 address 2a02:fe80:1010::16

If you are using CleanBrowsing, it will block (return not found) for adult sites:

 $ php dnstls.php pornhub.com cleanbrowsing 
 Host pornhub.com not found: 3(NXDOMAIN)

Limitations

This is just an initial test version. Use at your own risk. PRs are always welcome.