<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">Hello Grzegorz,<div><br></div><div>The resolve_on_probe flag is used to have the probe do DNS resolution, otherwise the backend takes care of that.</div><div><br></div><div>Cheers,</div><div><br></div><div>Michel<br><div><br><blockquote type="cite"><div>On 26 Jul 2023, at 17:47, Ponikierski, Grzegorz <gponikie@akamai.com> wrote:</div><br class="Apple-interchange-newline"><div><meta charset="UTF-8"><div class="WordSection1" style="page: WordSection1; caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;"><span lang="EN-US">Indeed “tls” flag seems to work. Thanks!<o:p></o:p></span></div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;"><span lang="EN-US"><o:p> </o:p></span></div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;"><span lang="EN-US">After first try with DoT providers like one.one.one.one or<span class="Apple-converted-space"> </span><a href="http://dns.google/" style="color: blue; text-decoration: underline;">dns.google</a><span class="Apple-converted-space"> </span>I have additional question. When exactly FQDN from “target” is resolved to IP?</span><span lang="EN-US" style="color: rgb(29, 28, 29);"><span class="Apple-converted-space"> </span></span><span lang="EN-US" style="color: rgb(29, 28, 29);">Is</span><span style="color: rgb(29, 28, 29);"><span class="Apple-converted-space"> </span>RIPE Atlas resolve domain to IP only once during measurements creation or<span class="Apple-converted-space"> </span></span><span lang="EN-US" style="color: rgb(29, 28, 29);">is</span><span style="color: rgb(29, 28, 29);"><span class="Apple-converted-space"> </span>each probe resolve domain to IP individually</span><span lang="EN-US" style="color: rgb(29, 28, 29);">? It’s important details for me because I will work with FQDN that will resolve do different IP depending on user location so if it is resolved only once by RIPE Atlas system then probes will be using sub-optimal IPs to run tests.</span><span><o:p></o:p></span></div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;"><span><o:p> </o:p></span></div><div><div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;"><span lang="EN-US" style="">Regards,</span><span style=""><o:p></o:p></span></div></div></div></div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;"><span style="">Grzegorz</span><span><o:p></o:p></span></div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;"><span><o:p> </o:p></span></div><div style="border-width: 1pt medium medium; border-style: solid none none; border-color: rgb(181, 196, 223) currentcolor currentcolor; border-image: none; padding: 3pt 0cm 0cm;"><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;"><b><span style="font-size: 12pt;">From:<span class="Apple-converted-space"> </span></span></b><span style="font-size: 12pt;">Michel Stam <<a href="mailto:mstam@ripe.net" style="color: blue; text-decoration: underline;">mstam@ripe.net</a>><br><b>Date:<span class="Apple-converted-space"> </span></b>Wednesday, 26 July 2023 at 17:13<br><b>To:<span class="Apple-converted-space"> </span></b>"Ponikierski, Grzegorz" <<a href="mailto:gponikie@akamai.com" style="color: blue; text-decoration: underline;">gponikie@akamai.com</a>><br><b>Subject:<span class="Apple-converted-space"> </span></b>Re: [atlas] DoH and DoT measurements<o:p></o:p></span></div></div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;"><o:p> </o:p></div></div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;">Hey Grzegorz,<span class="Apple-converted-space"> </span><o:p></o:p></div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;"><o:p> </o:p></div></div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;">It’s a bit hidden, but in the measurement definition I think the key ’tis’ needs to be set to the boolean value ’true’. That should enable DNS over TLS.<o:p></o:p></div></div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;"><o:p> </o:p></div></div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;">Cheers,<o:p></o:p></div></div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;"><o:p> </o:p></div></div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;">Michel<o:p></o:p></div></div><div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;"><br><br><o:p></o:p></div><blockquote style="margin-top: 5pt; margin-bottom: 5pt;"><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;">On 26 Jul 2023, at 17:09, Ponikierski, Grzegorz <<a href="mailto:gponikie@akamai.com" style="color: blue; text-decoration: underline;">gponikie@akamai.com</a>> wrote:<o:p></o:p></div></div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;"><o:p> </o:p></div><div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;"><span lang="EN-US">I have reviewed API Manual and Reference but I don’t see anything about DoH or DoT. Maybe I have overlooked something?</span><o:p></o:p></div></div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;"> <o:p></o:p></div></div><div><div><div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;"><span lang="EN-US">Regards,</span><o:p></o:p></div></div></div></div></div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;">Grzegorz<o:p></o:p></div></div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;"> <o:p></o:p></div></div><div style="border-width: 1pt medium medium; border-style: solid none none; padding: 3pt 0cm 0cm; border-color: currentcolor; border-image: none;"><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;"><b><span style="font-size: 12pt;">From:<span class="apple-converted-space"> </span></span></b><span style="font-size: 12pt;">Michel Stam <<a href="mailto:mstam@ripe.net" style="color: blue; text-decoration: underline;">mstam@ripe.net</a>><br><b>Date:<span class="apple-converted-space"> </span></b>Wednesday, 26 July 2023 at 15:30<br><b>To:<span class="apple-converted-space"> </span></b>"Ponikierski, Grzegorz" <<a href="mailto:gponikie@akamai.com" style="color: blue; text-decoration: underline;">gponikie@akamai.com</a>><br><b>Cc:<span class="apple-converted-space"> </span></b>"<a href="mailto:ripe-atlas@ripe.net" style="color: blue; text-decoration: underline;">ripe-atlas@ripe.net</a>" <<a href="mailto:ripe-atlas@ripe.net" style="color: blue; text-decoration: underline;">ripe-atlas@ripe.net</a>><br><b>Subject:<span class="apple-converted-space"> </span></b>Re: [atlas] DoH and DoT measurements</span><o:p></o:p></div></div></div><div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;"> <o:p></o:p></div></div></div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;">Hello Gzzegorz,<span class="apple-converted-space"> </span><o:p></o:p></div></div><div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;"> <o:p></o:p></div></div></div><div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;">If I saw correctly DNS over TLS should be possible. Some initial steps have been taken to implement DNS over HTTP(S) but such is not available yet.<o:p></o:p></div></div></div><div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;">You will probably have to use the API to schedule one, though<o:p></o:p></div></div></div><div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;"> <o:p></o:p></div></div></div><div><div><div><table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="300" style="width: 225pt; background: rgb(229, 230, 233); border-collapse: collapse;"><tbody><tr><td style="padding: 0cm;"><table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="300" style="width: 225pt; background: rgb(229, 230, 233);"><tbody><tr><td style="padding: 6pt 0cm;"><div style="margin-left: 12pt; margin-right: 12pt; max-width: 100%; overflow: hidden;"><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;"><span style="font-size: 9pt; font-family: Helvetica;"><a href="https://urldefense.com/v3/__https:/atlas.ripe.net/docs/__;!!GjvTz_vk!UIWbNOgesINdK7phtPcRFUNL6Ah4klT6w0UBrDN6eQQavoEWGbvHAf3Q-h2r1ErslWGKwtF0RHE$" style="color: blue; text-decoration: underline;"><span style="color: rgb(39, 39, 39); text-decoration: none;">RIPE Atlas docs | RIPE Atlas Documentation | Docs</span></a></span><o:p></o:p></div></div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;"><span style="font-size: 8.5pt; font-family: Helvetica;"><a href="https://urldefense.com/v3/__https:/atlas.ripe.net/docs/__;!!GjvTz_vk!UIWbNOgesINdK7phtPcRFUNL6Ah4klT6w0UBrDN6eQQavoEWGbvHAf3Q-h2r1ErslWGKwtF0RHE$" style="color: blue; text-decoration: underline;"><span style="color: gray; text-decoration: none;">atlas.ripe.net</span></a></span><o:p></o:p></div></div></div></td><td width="36" style="width: 27pt; padding: 0cm 9pt 0cm 0cm;"><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;"><span style="font-family: Helvetica;"><a href="https://urldefense.com/v3/__https:/atlas.ripe.net/docs/__;!!GjvTz_vk!UIWbNOgesINdK7phtPcRFUNL6Ah4klT6w0UBrDN6eQQavoEWGbvHAf3Q-h2r1ErslWGKwtF0RHE$" style="color: blue; text-decoration: underline;"><span lang="X-NONE" style="font-size: 1pt; font-family: "Times New Roman", serif; border: 1pt windowtext; padding: 0cm; background: black; text-decoration: none;"><image001.png></span></a></span><o:p></o:p></div></div></td></tr></tbody></table></td></tr></tbody></table></div></div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;"> <o:p></o:p></div></div></div><div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;">Hope this helps,<o:p></o:p></div></div></div><div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;"> <o:p></o:p></div></div></div><div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;">Regards,<o:p></o:p></div></div></div><div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;"> <o:p></o:p></div></div></div><div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;">Michel<o:p></o:p></div></div></div><div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;"> <o:p></o:p></div></div></div><div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;"> <o:p></o:p></div></div></div><div><div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;"><br><br><br><o:p></o:p></div></div><blockquote style="margin-top: 5pt; margin-bottom: 5pt;"><div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;">On 26 Jul 2023, at 15:09, Ponikierski, Grzegorz via ripe-atlas <<a href="mailto:ripe-atlas@ripe.net" style="color: blue; text-decoration: underline;">ripe-atlas@ripe.net</a>> wrote:<o:p></o:p></div></div></div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;"> <o:p></o:p></div></div><div><div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;"><span lang="EN-US">Hi!</span><o:p></o:p></div></div></div><div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;"><span lang="EN-US"> </span><o:p></o:p></div></div></div><div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;"><span lang="EN-US">Is it possible to run DNS over HTTPS and DNS over TLS measurements with RIPE Atlas?</span><o:p></o:p></div></div></div><div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;"> <o:p></o:p></div></div></div><div><div><div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;"><span lang="EN-US">Regards,</span><o:p></o:p></div></div></div><div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;">Grzegorz<o:p></o:p></div></div></div></div></div><div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;"><span style="font-size: 9pt; font-family: Helvetica;">--<span class="apple-converted-space"> </span><br>ripe-atlas mailing list<br></span><a href="mailto:ripe-atlas@ripe.net" style="color: blue; text-decoration: underline;"><span style="font-size: 9pt; font-family: Helvetica;">ripe-atlas@ripe.net</span></a><span style="font-size: 9pt; font-family: Helvetica;"><br></span><a href="https://urldefense.com/v3/__https:/lists.ripe.net/mailman/listinfo/ripe-atlas__;!!GjvTz_vk!UIWbNOgesINdK7phtPcRFUNL6Ah4klT6w0UBrDN6eQQavoEWGbvHAf3Q-h2r1ErslWGKT9WPC80$" style="color: blue; text-decoration: underline;"><span style="font-size: 9pt; font-family: Helvetica;">https://mailman.ripe.net/</span></a></div></div></div></blockquote></div></div></div></blockquote></div></div></div></div></blockquote></div><br></div></body></html>