Hello. I'm getting a strange error (uci:invalid argument) when starting http-dns-proxy. It doesn't seem to happen when option dnsmasq_config_update is set to '*'? The service does start.
Any ideas?
root@Router:~# service https-dns-proxy restart
Starting https-dns-proxy 2025.05.11-r1 instances /sbin/uci: Invalid argument
/sbin/uci: Invalid argument
/sbin/uci: Invalid argument
/sbin/uci: Invalid argument
/sbin/uci: Invalid argument
/sbin/uci: Invalid argument
/sbin/uci: Invalid argument
/sbin/uci: Invalid argument
/sbin/uci: Invalid argument
/sbin/uci: Invalid argument
✓/sbin/uci: Invalid argument
/sbin/uci: Invalid argument
/sbin/uci: Invalid argument
/sbin/uci: Invalid argument
✓
Setting trigger for wan ✓
Config:
root@Router:~# cat /etc/config/https-dns-proxy
config main 'config'
option canary_domains_icloud '1'
option canary_domains_mozilla '1'
option force_dns '1'
list force_dns_port '53'
list force_dns_port '853'
list procd_fw_src_interfaces 'lan'
option procd_trigger_wan6 '0'
option dnsmasq_config_update '-'
config https-dns-proxy
option bootstrap_dns '194.242.2.6,2a07:e340::6'
option resolver_url 'https://family.dns.mullvad.net/dns-query'
option listen_addr '127.0.0.1'
option listen_port '5053'
option user 'nobody'
option group 'nogroup'
config https-dns-proxy
option bootstrap_dns '194.242.2.4,2a07:e340::4'
option resolver_url 'https://base.dns.mullvad.net/dns-query'
option listen_addr '127.0.0.1'
option listen_port '5054'
option user 'nobody'
option group 'nogroup'
Further information:
root@Router:~# ubus call system board
{
"kernel": "6.6.93",
"hostname": "Router",
"system": "Intel(R) Celeron(R) J4105 CPU @ 1.50GHz",
"model": "QEMU Standard PC (i440FX + PIIX, 1996)",
"board_name": "qemu-standard-pc-i440fx-piix-1996",
"rootfs_type": "ext4",
"release": {
"distribution": "OpenWrt",
"version": "24.10.2",
"revision": "r28739-d9340319c6",
"target": "x86/64",
"description": "OpenWrt 24.10.2 r28739-d9340319c6",
"builddate": "1750711236"
}
}
root@Router:~# curl -V
curl 8.12.1 (x86_64-openwrt-linux-gnu) libcurl/8.12.1 mbedTLS/3.6.4 nghttp2/1.63.0
Release-Date: 2025-02-13
Protocols: file ftp ftps http https ipfs ipns mqtt
Features: alt-svc HSTS HTTP2 HTTPS-proxy IPv6 Largefile SSL threadsafe UnixSockets
root@Router:~# dnsmasq --version
Dnsmasq version 2.90 Copyright (c) 2000-2024 Simon Kelley
Compile time options: IPv6 GNU-getopt no-DBus UBus no-i18n no-IDN DHCP no-DHCPv6 no-Lua TFTP no-conntrack no-ipset no-nftset no-auth no-cryptohash no-DNSSEC no-ID loop-detect inotify dumpfile
This software comes with ABSOLUTELY NO WARRANTY.
Dnsmasq is free software, and you are welcome to redistribute it
under the terms of the GNU General Public License, version 2 or 3.
root@Router:~# https-dns-proxy -V
2025.05.11-r1
Using: ev/4.33 c-ares/1.33.1 libcurl/8.12.1 mbedTLS/3.6.4 nghttp2/1.63.0
Features: HTTP2 HTTPS-proxy IPv6
root@Router:~# service https-dns-proxy status
running
root@Router:~# service https-dns-proxy info
{
"https-dns-proxy": {
"instances": {
"instance1": {
"running": true,
"pid": 20010,
"command": [
"/usr/sbin/https-dns-proxy",
"-r",
"https://family.dns.mullvad.net/dns-query",
"-a",
"127.0.0.1",
"-p",
"5053",
"-b",
"194.242.2.6",
"-4",
"-u",
"nobody",
"-g",
"nogroup"
],
"term_timeout": 5,
"data": {
"firewall": [
{
"type": "redirect",
"target": "DNAT",
"src": "lan",
"proto": "tcp udp",
"src_dport": "53",
"dest_port": "53",
"family": "any",
"reflection": false
},
{
"type": "rule",
"src": "lan",
"dest": "*",
"proto": "tcp udp",
"dest_port": "853",
"target": "REJECT"
}
],
"mdns": {
"https-dns-proxy_5053": {
"service": "_https-dns-proxy._udp.local",
"port": 5053,
"txt": [
"DNS over HTTPS proxy"
]
}
}
},
"respawn": {
"threshold": 3600,
"timeout": 5,
"retry": 5
}
},
"instance2": {
"running": true,
"pid": 20011,
"command": [
"/usr/sbin/https-dns-proxy",
"-r",
"https://base.dns.mullvad.net/dns-query",
"-a",
"127.0.0.1",
"-p",
"5054",
"-b",
"194.242.2.4",
"-4",
"-u",
"nobody",
"-g",
"nogroup"
],
"term_timeout": 5,
"data": {
"mdns": {
"https-dns-proxy_5054": {
"service": "_https-dns-proxy._udp.local",
"port": 5054,
"txt": [
"DNS over HTTPS proxy"
]
}
}
},
"respawn": {
"threshold": 3600,
"timeout": 5,
"retry": 5
}
}
},
"triggers": [
[
"interface.*",
[
"if",
[
"eq",
"interface",
"wan"
],
[
"run_script",
"/etc/init.d/https-dns-proxy",
"restart",
"on_interface_trigger"
]
],
1000
],
[
"config.change",
[
"if",
[
"eq",
"package",
"https-dns-proxy"
],
[
"run_script",
"/etc/init.d/https-dns-proxy",
"reload",
"on_config_change"
]
],
1000
]
]
}
}
root@Router:~# nslookup google.com 127.0.0.1:5053
Server: 127.0.0.1:5053
Address: 127.0.0.1:5053
Non-authoritative answer:
Name: google.com
Address: 142.250.180.14
Non-authoritative answer:
Name: google.com
Address: 2a00:1450:4009:81e::200e
