// Copyright 2020 The Chromium Authors // Use of this source code is governed by a BSD-style license that can be // found in the LICENSE file. #include "net/dns/public/doh_provider_entry.h" #include #include #include "base/check_op.h" #include "base/feature_list.h" #include "base/no_destructor.h" #include "base/ranges/algorithm.h" #include "net/dns/public/dns_over_https_server_config.h" #include "net/dns/public/util.h" namespace net { namespace { std::set ParseIPs(const std::set& ip_strs) { std::set ip_addresses; for (std::string_view ip_str : ip_strs) { IPAddress ip_address; bool success = ip_address.AssignFromIPLiteral(ip_str); DCHECK(success); ip_addresses.insert(std::move(ip_address)); } return ip_addresses; } DnsOverHttpsServerConfig ParseValidDohTemplate( std::string server_template, const std::set& endpoint_ip_strs) { std::set endpoint_ips = ParseIPs(endpoint_ip_strs); std::vector> endpoints; // Note: `DnsOverHttpsServerConfig` supports separate groups of endpoint IPs, // but for now we'll just support all endpoint IPs combined into one grouping // since the only use of the endpoint IPs in the server config combines them // anyway. if (!endpoint_ips.empty()) { endpoints.emplace_back(endpoint_ips.begin(), endpoint_ips.end()); } auto parsed_template = DnsOverHttpsServerConfig::FromString( std::move(server_template), endpoints); DCHECK(parsed_template.has_value()); // Template must be valid. return std::move(*parsed_template); } } // namespace #define MAKE_BASE_FEATURE_WITH_STATIC_STORAGE(feature_name, feature_state) \ ([]() { \ static BASE_FEATURE(k##feature_name, #feature_name, feature_state); \ return &k##feature_name; \ })() // static const DohProviderEntry::List& DohProviderEntry::GetList() { // See /net/docs/adding_doh_providers.md for instructions on modifying this // DoH provider list. // // The provider names in these entries should be kept in sync with the // DohProviderId histogram suffix list in // tools/metrics/histograms/metadata/histogram_suffixes_list.xml. static const base::NoDestructor providers{{ new DohProviderEntry( "AlekBergNl", MAKE_BASE_FEATURE_WITH_STATIC_STORAGE( DohProviderAlekBergNl, base::FEATURE_ENABLED_BY_DEFAULT), /*dns_over_53_server_ip_strs=*/{}, /*dns_over_tls_hostnames=*/{}, "https://dnsnl.alekberg.net/dns-query{?dns}", /*ui_name=*/"alekberg.net (NL)", /*privacy_policy=*/"https://alekberg.net/privacy", /*display_globally=*/false, /*display_countries=*/{"NL"}, LoggingLevel::kNormal), new DohProviderEntry( "CleanBrowsingAdult", MAKE_BASE_FEATURE_WITH_STATIC_STORAGE( DohProviderCleanBrowsingAdult, base::FEATURE_ENABLED_BY_DEFAULT), {"185.228.168.10", "185.228.169.11", "2a0d:2a00:1::1", "2a0d:2a00:2::1"}, /*dns_over_tls_hostnames=*/{"adult-filter-dns.cleanbrowsing.org"}, "https://doh.cleanbrowsing.org/doh/adult-filter{?dns}", /*ui_name=*/"", /*privacy_policy=*/"", /*display_globally=*/false, /*display_countries=*/{}, LoggingLevel::kNormal), new DohProviderEntry( "CleanBrowsingFamily", MAKE_BASE_FEATURE_WITH_STATIC_STORAGE( DohProviderCleanBrowsingFamily, base::FEATURE_ENABLED_BY_DEFAULT), {"185.228.168.168", "185.228.169.168", "2a0d:2a00:1::", "2a0d:2a00:2::"}, /*dns_over_tls_hostnames=*/{"family-filter-dns.cleanbrowsing.org"}, "https://doh.cleanbrowsing.org/doh/family-filter{?dns}", /*ui_name=*/"CleanBrowsing (Family Filter)", /*privacy_policy=*/"https://cleanbrowsing.org/privacy", /*display_globally=*/true, /*display_countries=*/{}, LoggingLevel::kNormal), new DohProviderEntry( "CleanBrowsingSecure", MAKE_BASE_FEATURE_WITH_STATIC_STORAGE( DohProviderCleanBrowsingSecure, base::FEATURE_ENABLED_BY_DEFAULT), {"185.228.168.9", "185.228.169.9", "2a0d:2a00:1::2", "2a0d:2a00:2::2"}, /*dns_over_tls_hostnames=*/{"security-filter-dns.cleanbrowsing.org"}, "https://doh.cleanbrowsing.org/doh/security-filter{?dns}", /*ui_name=*/"", /*privacy_policy=*/"", /*display_globally=*/false, /*display_countries=*/{}, LoggingLevel::kNormal), new DohProviderEntry( "Cloudflare", MAKE_BASE_FEATURE_WITH_STATIC_STORAGE( DohProviderCloudflare, base::FEATURE_ENABLED_BY_DEFAULT), {"1.1.1.1", "1.0.0.1", "2606:4700:4700::1111", "2606:4700:4700::1001"}, /*dns_over_tls_hostnames=*/ {"one.one.one.one", "1dot1dot1dot1.cloudflare-dns.com"}, "https://chrome.cloudflare-dns.com/dns-query", /*ui_name=*/"Cloudflare (1.1.1.1)", "https://developers.cloudflare.com/1.1.1.1/privacy/" /*privacy_policy=*/"public-dns-resolver/", /*display_globally=*/true, /*display_countries=*/{}, LoggingLevel::kExtra), new DohProviderEntry( "Comcast", MAKE_BASE_FEATURE_WITH_STATIC_STORAGE( DohProviderComcast, base::FEATURE_ENABLED_BY_DEFAULT), {"75.75.75.75", "75.75.76.76", "2001:558:feed::1", "2001:558:feed::2"}, /*dns_over_tls_hostnames=*/{"dot.xfinity.com"}, "https://doh.xfinity.com/dns-query{?dns}", /*ui_name=*/"", /*privacy_policy*/ "", /*display_globally=*/false, /*display_countries=*/{}, LoggingLevel::kExtra), new DohProviderEntry( "Cox", MAKE_BASE_FEATURE_WITH_STATIC_STORAGE( DohProviderCox, base::FEATURE_ENABLED_BY_DEFAULT), {"68.105.28.11", "68.105.28.12", "2001:578:3f::30"}, /*dns_over_tls_hostnames=*/{"dot.cox.net"}, "https://doh.cox.net/dns-query", /*ui_name=*/"", /*privacy_policy=*/"", /*display_globally=*/false, /*display_countries=*/{}, LoggingLevel::kNormal), new DohProviderEntry( "Cznic", MAKE_BASE_FEATURE_WITH_STATIC_STORAGE( DohProviderCznic, base::FEATURE_ENABLED_BY_DEFAULT), {"185.43.135.1", "193.17.47.1", "2001:148f:fffe::1", "2001:148f:ffff::1"}, /*dns_over_tls_hostnames=*/{"odvr.nic.cz"}, "https://odvr.nic.cz/doh", /*ui_name=*/"CZ.NIC ODVR", /*privacy_policy=*/"https://www.nic.cz/odvr/", /*display_globally=*/false, /*display_countries=*/{"CZ"}, LoggingLevel::kNormal), new DohProviderEntry( "Dnssb", MAKE_BASE_FEATURE_WITH_STATIC_STORAGE( DohProviderDnssb, base::FEATURE_ENABLED_BY_DEFAULT), {"185.222.222.222", "45.11.45.11", "2a09::", "2a11::"}, /*dns_over_tls_hostnames=*/{"dns.sb"}, "https://doh.dns.sb/dns-query{?dns}", /*ui_name=*/"DNS.SB", /*privacy_policy=*/"https://dns.sb/privacy/", /*display_globally=*/false, /*display_countries=*/{"EE", "DE"}, LoggingLevel::kNormal), new DohProviderEntry( "Google", MAKE_BASE_FEATURE_WITH_STATIC_STORAGE( DohProviderGoogle, base::FEATURE_ENABLED_BY_DEFAULT), {"8.8.8.8", "8.8.4.4", "2001:4860:4860::8888", "2001:4860:4860::8844"}, /*dns_over_tls_hostnames=*/ {"dns.google", "dns.google.com", "8888.google"}, "https://dns.google/dns-query{?dns}", /*ui_name=*/"Google (Public DNS)", "https://developers.google.com/speed/public-dns/" /*privacy_policy=*/"privacy", /*display_globally=*/true, /*display_countries=*/{}, LoggingLevel::kExtra), new DohProviderEntry( "GoogleDns64", MAKE_BASE_FEATURE_WITH_STATIC_STORAGE( DohProviderGoogleDns64, base::FEATURE_ENABLED_BY_DEFAULT), {"2001:4860:4860::64", "2001:4860:4860::6464"}, /*dns_over_tls_hostnames=*/{"dns64.dns.google"}, "https://dns64.dns.google/dns-query{?dns}", /*ui_name=*/"", /*privacy_policy=*/"", /*display_globally=*/false, /*display_countries=*/{}, LoggingLevel::kNormal), new DohProviderEntry( "Iij", MAKE_BASE_FEATURE_WITH_STATIC_STORAGE( DohProviderIij, base::FEATURE_ENABLED_BY_DEFAULT), /*dns_over_53_server_ip_strs=*/{}, /*dns_over_tls_hostnames=*/{}, "https://public.dns.iij.jp/dns-query", /*ui_name=*/"IIJ (Public DNS)", /*privacy_policy=*/"https://public.dns.iij.jp/", /*display_globally=*/false, /*display_countries=*/{"JP"}, LoggingLevel::kNormal), new DohProviderEntry( "Levonet", MAKE_BASE_FEATURE_WITH_STATIC_STORAGE( DohProviderLevonet, base::FEATURE_ENABLED_BY_DEFAULT), {"109.236.119.2", "109.236.120.2", "2a02:6ca3:0:1::2", "2a02:6ca3:0:2::2"}, /*dns_over_tls_hostnames=*/{}, "https://dns.levonet.sk/dns-query{?dns}", /*ui_name=*/"", /*privacy_policy=*/"", /*display_globally=*/false, /*display_countries=*/{}, LoggingLevel::kNormal, {"109.236.119.2", "109.236.120.2", "2a02:6ca3:0:1::2", "2a02:6ca3:0:2::2"}), new DohProviderEntry( "NextDns", MAKE_BASE_FEATURE_WITH_STATIC_STORAGE( DohProviderNextDns, base::FEATURE_ENABLED_BY_DEFAULT), /*dns_over_53_server_ip_strs=*/{}, /*dns_over_tls_hostnames=*/{}, "https://chromium.dns.nextdns.io", /*ui_name=*/"NextDNS", /*privacy_policy=*/"https://nextdns.io/privacy", /*display_globally=*/false, /*display_countries=*/{"US"}, LoggingLevel::kNormal), new DohProviderEntry( "OpenDNS", MAKE_BASE_FEATURE_WITH_STATIC_STORAGE( DohProviderOpenDNS, base::FEATURE_ENABLED_BY_DEFAULT), {"208.67.222.222", "208.67.220.220", "2620:119:35::35", "2620:119:53::53"}, /*dns_over_tls_hostnames=*/{}, "https://doh.opendns.com/dns-query{?dns}", /*ui_name=*/"OpenDNS", "https://www.cisco.com/c/en/us/about/legal/" /*privacy_policy=*/"privacy-full.html", /*display_globally=*/true, /*display_countries=*/{}, LoggingLevel::kNormal), new DohProviderEntry( "OpenDNSFamily", MAKE_BASE_FEATURE_WITH_STATIC_STORAGE( DohProviderOpenDNSFamily, base::FEATURE_ENABLED_BY_DEFAULT), {"208.67.222.123", "208.67.220.123", "2620:119:35::123", "2620:119:53::123"}, /*dns_over_tls_hostnames=*/{}, "https://doh.familyshield.opendns.com/dns-query{?dns}", /*ui_name=*/"", /*privacy_policy=*/"", /*display_globally=*/false, /*display_countries=*/{}, LoggingLevel::kNormal), new DohProviderEntry( "Quad9Cdn", MAKE_BASE_FEATURE_WITH_STATIC_STORAGE( DohProviderQuad9Cdn, base::FEATURE_ENABLED_BY_DEFAULT), {"9.9.9.11", "149.112.112.11", "2620:fe::11", "2620:fe::fe:11"}, /*dns_over_tls_hostnames=*/{"dns11.quad9.net"}, "https://dns11.quad9.net/dns-query", /*ui_name=*/"", /*privacy_policy=*/"", /*display_globally=*/false, /*display_countries=*/{}, LoggingLevel::kNormal), new DohProviderEntry( "Quad9Insecure", MAKE_BASE_FEATURE_WITH_STATIC_STORAGE( DohProviderQuad9Insecure, base::FEATURE_ENABLED_BY_DEFAULT), {"9.9.9.10", "149.112.112.10", "2620:fe::10", "2620:fe::fe:10"}, /*dns_over_tls_hostnames=*/{"dns10.quad9.net"}, "https://dns10.quad9.net/dns-query", /*ui_name=*/"", /*privacy_policy=*/"", /*display_globally=*/false, /*display_countries=*/{}, LoggingLevel::kNormal), new DohProviderEntry( "Quad9Secure", MAKE_BASE_FEATURE_WITH_STATIC_STORAGE( DohProviderQuad9Secure, base::FEATURE_DISABLED_BY_DEFAULT), {"9.9.9.9", "149.112.112.112", "2620:fe::fe", "2620:fe::9"}, /*dns_over_tls_hostnames=*/{"dns.quad9.net", "dns9.quad9.net"}, "https://dns.quad9.net/dns-query", /*ui_name=*/"Quad9 (9.9.9.9)", /*privacy_policy=*/"https://www.quad9.net/home/privacy/", /*display_globally=*/true, /*display_countries=*/{}, LoggingLevel::kExtra), new DohProviderEntry( "Quickline", MAKE_BASE_FEATURE_WITH_STATIC_STORAGE( DohProviderQuickline, base::FEATURE_ENABLED_BY_DEFAULT), {"212.60.61.246", "212.60.63.246", "2001:1a88:10:ffff::1", "2001:1a88:10:ffff::2"}, /*dns_over_tls_hostnames=*/{"dot.quickline.ch"}, "https://doh.quickline.ch/dns-query{?dns}", /*ui_name=*/"", /*privacy_policy=*/"", /*display_globally=*/false, /*display_countries=*/{}, LoggingLevel::kNormal), new DohProviderEntry( "Spectrum1", MAKE_BASE_FEATURE_WITH_STATIC_STORAGE( DohProviderSpectrum1, base::FEATURE_ENABLED_BY_DEFAULT), {"209.18.47.61", "209.18.47.62", "2001:1998:0f00:0001::1", "2001:1998:0f00:0002::1"}, /*dns_over_tls_hostnames=*/{}, "https://doh-01.spectrum.com/dns-query{?dns}", /*ui_name=*/"", /*privacy_policy=*/"", /*display_globally=*/false, /*display_countries=*/{}, LoggingLevel::kNormal), new DohProviderEntry( "Spectrum2", MAKE_BASE_FEATURE_WITH_STATIC_STORAGE( DohProviderSpectrum2, base::FEATURE_ENABLED_BY_DEFAULT), {"209.18.47.61", "209.18.47.62", "2001:1998:0f00:0001::1", "2001:1998:0f00:0002::1"}, /*dns_over_tls_hostnames=*/{}, "https://doh-02.spectrum.com/dns-query{?dns}", /*ui_name=*/"", /*privacy_policy=*/"", /*display_globally=*/false, /*display_countries=*/{}, LoggingLevel::kNormal), }}; return *providers; } #undef MAKE_BASE_FEATURE_WITH_STATIC_STORAGE // static DohProviderEntry DohProviderEntry::ConstructForTesting( std::string provider, const base::Feature* feature, std::set dns_over_53_server_ip_strs, std::set dns_over_tls_hostnames, std::string dns_over_https_template, std::string ui_name, std::string privacy_policy, bool display_globally, std::set display_countries, LoggingLevel logging_level) { return DohProviderEntry( std::move(provider), feature, std::move(dns_over_53_server_ip_strs), std::move(dns_over_tls_hostnames), std::move(dns_over_https_template), std::move(ui_name), std::move(privacy_policy), display_globally, std::move(display_countries), logging_level); } DohProviderEntry::~DohProviderEntry() = default; DohProviderEntry::DohProviderEntry( std::string provider, const base::Feature* feature, std::set dns_over_53_server_ip_strs, std::set dns_over_tls_hostnames, std::string dns_over_https_template, std::string ui_name, std::string privacy_policy, bool display_globally, std::set display_countries, LoggingLevel logging_level, std::set dns_over_https_server_ip_strs) : provider(std::move(provider)), feature(*feature), ip_addresses(ParseIPs(dns_over_53_server_ip_strs)), dns_over_tls_hostnames(std::move(dns_over_tls_hostnames)), doh_server_config( ParseValidDohTemplate(std::move(dns_over_https_template), std::move(dns_over_https_server_ip_strs))), ui_name(std::move(ui_name)), privacy_policy(std::move(privacy_policy)), display_globally(display_globally), display_countries(std::move(display_countries)), logging_level(logging_level) { DCHECK(!display_globally || this->display_countries.empty()); if (display_globally || !this->display_countries.empty()) { DCHECK(!this->ui_name.empty()); DCHECK(!this->privacy_policy.empty()); } for (const auto& display_country : this->display_countries) { DCHECK_EQ(2u, display_country.size()); } } } // namespace net