aboutsummaryrefslogtreecommitdiff
path: root/plugin/tls
diff options
context:
space:
mode:
Diffstat (limited to 'plugin/tls')
-rw-r--r--plugin/tls/README.md10
1 files changed, 9 insertions, 1 deletions
diff --git a/plugin/tls/README.md b/plugin/tls/README.md
index da33c0951..9d945b83e 100644
--- a/plugin/tls/README.md
+++ b/plugin/tls/README.md
@@ -2,7 +2,7 @@
## Name
-*tls* - allows you to configure the server certificates for the TLS and gRPC servers.
+*tls* - allows you to configure the server certificates for the TLS, gRPC, DoH servers.
## Description
@@ -57,6 +57,14 @@ grpc://. {
}
~~~
+Start a DoH server on port 443 that is similar to the previous example, but using DoH for incoming queries.
+~~~
+https://. {
+ tls cert.pem key.pem ca.pem
+ forward . /etc/resolv.conf
+}
+~~~
+
Only Knot DNS' `kdig` supports DNS-over-TLS queries, no command line client supports gRPC making
debugging these transports harder than it should be.