https://github.com/cmliu/CF-Workers-DoH

基于这个在 cf 上自建了一个 doh ，发现 gfw 会针对域名进行封锁，比如取名 dns.mydomain.xyz 或者 doh.mydomain.xyz ，甚至 mydoh.mydomain.xyz 都无法访问，后来改名叫 domain.mydomain.xyz ，就行了

curl https://mydoh.mydomain.xyz/ -v -4
* Host mydoh.mydomain.xyz:443 was resolved.
* IPv6: (none)
* IPv4: 104.21.7.35, 172.67.135.177
*   Trying 104.21.7.35:443...
* ALPN: curl offers h2,http/1.1
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
*  CAfile: /etc/ssl/certs/ca-certificates.crt
*  CApath: none
* Recv failure: Connection reset by peer
* TLS connect error: error:00000000:lib(0)::reason(0)
* OpenSSL SSL_connect: Connection reset by peer in connection to mydoh.mydomain.xyz:443
* closing connection #0
curl: (35) Recv failure: Connection reset by peer