feat(packaging): ODoH client Docker deploy recipe #131

2026-04-22T21:36:04+08:00

razvandimescu commented

2026-04-22 21:36:04 +08:00

(Migrated from github.com)

Summary

New packaging/client/ with docker-compose.yml, starter numa.toml, and a deploy README for running numa as an ODoH client in one container.
Default config pairs odoh-relay.numa.rs with Cloudflare's ODoH target — two independent operators with distinct eTLD+1s, so it passes the same-operator check out of the box.
Exposes :53 (UDP+TCP) for LAN clients and :5380 for the dashboard + REST API.
Main README's Docker section now links both packaging/client/ and the existing packaging/relay/.

Test plan

Verified locally via docker run with host ports overridden to 5553:53 + 5381:5380, image ghcr.io/razvandimescu/numa:latest.

Container starts; upstream wires to odoh://odoh.cloudflare-dns.com/dns-query via odoh-relay.numa.rs/relay; blocklist downloads (412k domains).
dig @127.0.0.1 -p 5553 example.com resolves (104.20.23.154, 172.66.147.243).
curl http://127.0.0.1:5381/stats | jq '.upstream_transport.odoh' increments (2 queries → odoh: 2, other transports 0).
Same-eTLD+1 relay + target makes numa refuse to start: "upstream.relay and upstream.target resolve to the same host ... privacy property requires distinct operators".

Caught pre-merge: original commit had relay = .../proxy (Frank Denis's relay path). Numa's own relay is /relay. Fixed in amended commit 26b1cd5.

## Summary - New `packaging/client/` with `docker-compose.yml`, starter `numa.toml`, and a deploy README for running numa as an ODoH client in one container. - Default config pairs `odoh-relay.numa.rs` with Cloudflare's ODoH target — two independent operators with distinct eTLD+1s, so it passes the same-operator check out of the box. - Exposes `:53` (UDP+TCP) for LAN clients and `:5380` for the dashboard + REST API. - Main README's Docker section now links both `packaging/client/` and the existing `packaging/relay/`. ## Test plan Verified locally via `docker run` with host ports overridden to `5553:53` + `5381:5380`, image `ghcr.io/razvandimescu/numa:latest`. - [x] Container starts; upstream wires to `odoh://odoh.cloudflare-dns.com/dns-query via odoh-relay.numa.rs/relay`; blocklist downloads (412k domains). - [x] `dig @127.0.0.1 -p 5553 example.com` resolves (`104.20.23.154`, `172.66.147.243`). - [x] `curl http://127.0.0.1:5381/stats | jq '.upstream_transport.odoh'` increments (2 queries → `odoh: 2`, other transports `0`). - [x] Same-eTLD+1 `relay` + `target` makes numa refuse to start: `"upstream.relay and upstream.target resolve to the same host ... privacy property requires distinct operators"`. Caught pre-merge: original commit had `relay = .../proxy` (Frank Denis's relay path). Numa's own relay is `/relay`. Fixed in amended commit `26b1cd5`.

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: dearsky/numa#131