m13253/dns-over-https

[Feature Request]Disable logging

Opened this issue · 1 comments

mcmufffin commented

Dear Team,

we have an issue that due to failing upstream responses (it seems like clients requests records that servfail on porpuse) explode the logfiles. Logging is already set do verbose=disabled but it would be nice to disable it altogether.

Thanks!

m13253 commented

Thanks for reporting!

My memory could be wrong but I remember, if the upstream returns a ServFail, doh-server will not log anything, but simply forward the ServFail to the client.
Therefore, if you see ServFail in logs, the most likely reason is that doh-server have trouble connecting to the upstream.
I could be wrong, feel free to correct me if so.

Disabling verbose only disables anything “succeeds”. It will always leave anything “fails” in the log.

If you want to disable all logging, the easiest way is just >/dev/null 2>&1.
This is the most reliable way to ensure zero-logging policy, at the price of more difficult troubleshooting.