[GH-ISSUE #607] Server: Option to specify which interfaces to use #201

Closed
opened 2026-02-26 04:34:22 +03:00 by kerem · 5 comments
Owner

Originally created by @mageddo on GitHub (Nov 21, 2024).
Original GitHub issue: https://github.com/mageddo/dns-proxy-server/issues/607

Summary & Motivation

As requested at #544, it can be useful to bind DPS to one o more but specific network interfaces, by default DPS binds to all interfaces to make it easier to use, at the same time it can become unwanted or insecure when in more production like usecases.

Description

Create configs to decide which interfaces will be used to bind to the tcp/udp dns and web server

{
  "serverNetworkBindInterface": "en6" ,
  "dnsServerNetworkBindInterface": "en6",
  "webServerNetworkBindInterface": "en6" 
}

Where networkBindInterfacecan be a name ex en6 or a mac address, ex: acde48001122, ACDE48001122, ac:de:48:00:11:22, AC:DE:48:00:11:22

  • All configs will be default to null, which means all interfaces will be binded (0.0.0.0)
  • serverNetworkBindInterface will apply to both DNS and Web server
  • dnsServerNetworkBindInterface and webServerNetworkBindInterface will override the serverNetworkBindInterface config

Alternatives

Run DPS inside a docker container to prevent DPS to bind to unwanted interfaces at the host.

Originally created by @mageddo on GitHub (Nov 21, 2024). Original GitHub issue: https://github.com/mageddo/dns-proxy-server/issues/607 ## Summary & Motivation As requested at #544, it can be useful to bind DPS to one o more but specific network interfaces, by default DPS binds to all interfaces to make it easier to use, at the same time it can become unwanted or insecure when in more production like usecases. ## Description ### Create configs to decide which interfaces will be used to bind to the tcp/udp dns and web server ```json { "serverNetworkBindInterface": "en6" , "dnsServerNetworkBindInterface": "en6", "webServerNetworkBindInterface": "en6" } ``` Where `networkBindInterface`can be a **name** ex `en6` or a mac address, ex: `acde48001122`, `ACDE48001122`, `ac:de:48:00:11:22`, `AC:DE:48:00:11:22` * All configs will be default to `null`, which means all interfaces will be binded (`0.0.0.0`) * `serverNetworkBindInterface` will apply to both **DNS** and **Web** server * `dnsServerNetworkBindInterface` and `webServerNetworkBindInterface` will override the `serverNetworkBindInterface` config ## Alternatives Run DPS inside a docker container to prevent DPS to bind to unwanted interfaces at the host.
kerem 2026-02-26 04:34:22 +03:00
Author
Owner

@ak2766 commented on GitHub (Nov 22, 2024):

DPS has matured into a versatile tool. I think it is time it was included in DNS comparison table!

<!-- gh-comment-id:2493021848 --> @ak2766 commented on GitHub (Nov 22, 2024): DPS has matured into a versatile tool. I think it is time it was included in [DNS comparison table](https://en.wikipedia.org/wiki/Comparison_of_DNS_server_software)!
Author
Owner

@mageddo commented on GitHub (Nov 22, 2024):

See #609

<!-- gh-comment-id:2494498423 --> @mageddo commented on GitHub (Nov 22, 2024): See #609
Author
Owner

@mageddo commented on GitHub (Feb 24, 2025):

Consider to have the same configuration to choose the IP instead of the interface name

<!-- gh-comment-id:2678705423 --> @mageddo commented on GitHub (Feb 24, 2025): Consider to have the same configuration to choose the IP instead of the interface name
Author
Owner

@mageddo commented on GitHub (Dec 19, 2025):

Beta is out 5.6.x, use server.host config [ref], I would appreciate feedback. Thanks in advance.

<!-- gh-comment-id:3676037428 --> @mageddo commented on GitHub (Dec 19, 2025): Beta is out [5.6.x][1], use `server.host` config [[ref][2]], I would appreciate feedback. Thanks in advance. [1]: https://github.com/mageddo/dns-proxy-server/releases/tag/5.6.0-snapshot [2]: https://mageddo.github.io/dns-proxy-server/5.6/en/3-configuration/#server
Author
Owner

@ak2766 commented on GitHub (Dec 22, 2025):

Fantastic. I've seen a flurry of activity lately and was eagerly anticipating this.

I'll test soon.

<!-- gh-comment-id:3679873141 --> @ak2766 commented on GitHub (Dec 22, 2025): Fantastic. I've seen a flurry of activity lately and was eagerly anticipating this. I'll test soon.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/dns-proxy-server-mageddo#201
No description provided.