Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Tangerine is the best Node.js drop-in replacement for dns.promises.Resolver using DNS over HTTPS ("DoH") via undici with built-in retries, timeouts, smart server rotation, AbortControllers, and caching support for multiple backends via Keyv.
new Tangerine(options)
tangerine.cancel()
tangerine.getServers()
tangerine.lookup(hostname[, options])
tangerine.lookupService(address, port, abortController)
tangerine.resolve(hostname[, rrtype, options, abortController])
tangerine.resolve4(hostname[, options, abortController])
tangerine.resolve6(hostname[, options, abortController])
tangerine.resolveAny(hostname[, abortController])
tangerine.resolveCaa(hostname[, abortController]))
tangerine.resolveCname(hostname[, abortController]))
tangerine.resolveMx(hostname[, abortController]))
tangerine.resolveNaptr(hostname[, abortController]))
tangerine.resolveNs(hostname[, abortController]))
tangerine.resolvePtr(hostname[, abortController]))
tangerine.resolveSoa(hostname[, abortController]))
tangerine.resolveSrv(hostname[, abortController]))
tangerine.resolveTxt(hostname[, abortController]))
tangerine.reverse(ip[, abortController])
tangerine.setDefaultResultOrder(order)
tangerine.setServers(servers)
npm install tangerine
-import dns from 'dns';
+import Tangerine from 'tangerine';
- const resolver = new dns.promises.Resolver();
+const resolver = new Tangerine();
Our team at Forward Email (100% open-source and privacy-focused email service) needed a better solution for DNS.
unbound
, dnsmasq
, and bind
– and configuring /etc/resolv.conf
across multiple Ubuntu versions is not enjoyable (even with Ansible). Maintaining logic at the application layer is much easier from a development, deployment, and maintenance perspective.dns.setServers(['1.1.1.1'])
). The default timeout if you are behind a blackholed DNS server in Node.js is 75 seconds (due to c-ares
under the hood with 5
, 10
, 20
, and 40
second retry backoff timeout strategy).lookup
functions, have a limited sub-set of methods such as @zeit/dns-cached-resolver, or are unmaintained.dns.promises.Resolver
with DNS over HTTPS ("DoH").dns
module does not support caching out of the box – which is a highly requested feature (but belongs in userland).With DNS over HTTPS (DoH), DNS queries and responses are encrypted and sent via the HTTP or HTTP/2 protocols. DoH ensures that attackers cannot forge or alter DNS traffic. DoH uses port 443, which is the standard HTTPS traffic port, to wrap the DNS query in an HTTPS request. DNS queries and responses are camouflaged within other HTTPS traffic, since it all comes and goes from the same port. – Cloudflare
DNS over HTTPS (DoH) is a protocol for performing remote Domain Name System (DNS) resolution via the HTTPS protocol. A goal of the method is to increase user privacy and security by preventing eavesdropping and manipulation of DNS data by man-in-the-middle attacks by using the HTTPS protocol to encrypt the data between the DoH client and the DoH-based DNS resolver. – Wikipedia
We're the only email service provider that is 100% open-source and uses DNS over HTTPS ("DoH") throughout their entire infrastructure. We've open-sourced this project – which means you can integrate DNS over HTTPS ("DoH") by simply using :tangerine: Tangerine. Its documentation below includes Features, Usage and Examples, API, Options, and Benchmarks.
Thanks to the authors of dohdec, dns-packet, dns2, and native-dnssec-dns – which made this project possible and were used for inspiration.
:tangerine: Tangerine is a 1:1 drop-in replacement with DNS over HTTPS ("DoH") for dns.promises.Resolver:
new dns.promises.Resolver()
are available in new Tangerine()
.Tangerine
are also instances of dns.promises.Resolver
as this class extends
from it. This makes it compatible with cacheable-lookup.code
and errno
properties will appear as if they're from dns
usage). This is a configurable option enabled by default (see returnHTTPErrors
option).const resolveTxt = callbackify(tangerine.resolveTxt)
).['1.1.1.1', '1.0.0.1']
) (as opposed to the system default – which is often set to a default which is not privacy-focused or simply forgotten to be set by DevOps teams). You may also want to use Cloudflare's Malware and Adult Content Blocking DNS server addresses instead.servers
option (as opposed to having to invoke dns.setServers(...)
or resolver.setServers(...)
).lookup
and lookupService
methods have been added (these are not in the original dns.promises.Resolver
instance methods).cancel()
will signal "abort"
to all AbortController signals created for existing requests and handle cleanup.ecsClientSubnet
option has been added to all methods accepting an options
object for RFC 7871 client subnet querying (this includes resolve4
and resolve6
).tangerine.setServers(['1.1.1.1', '1.0.0.1', '8.8.8.8', '8.8.4.4'])
) – and if any of these servers have repeated errors, then they will be bumped to the end of the list (e.g. if 1.1.1.1
has errors, then the updated in-memory Set
for future requests will be ['1.0.0.1', '8.8.8.8', '8.8.4.4', '1.1.1.1']
). This "smart server rotation" behavior can be disabled (see smartRotate
option) – but it is discouraged, as the original behavior of c-ares does not rotate as such.NODE_DEBUG=tangerine node app.js
flag (uses util.debuglog).setLocalAddress()
will parse the IP address and port properly to pass along for use with the agent as localAddress
and localPort
. If you require IPv6 addresses with ports, you must encode it as [IPv6]:PORT
(similar to RFC 3986).syscall
values have been preserved:resolveAny
→ queryAny
resolve4
→ queryA
resolve6
→ queryAaaa
resolveCaa
→ queryCaa
resolveCname
→ queryCname
resolveMx
→ queryMx
resolveNs
→ queryNs
resolveNs
→ queryNs
resolveTxt
→ queryTxt
resolveSrv
→ querySrv
resolvePtr
→ queryPtr
resolveNaptr
→ queryNaptr
resolveSoa
→ querySoa
reverse
→ getHostByAddr
// app.mjs
import Tangerine from 'tangerine';
const tangerine = new Tangerine();
// or `const resolver = new Tangerine()`
tangerine.resolve('forwardemail.net', 'A').then(console.log);
// app.js
const Tangerine = require('tangerine');
const tangerine = new Tangerine();
// or `const resolver = new Tangerine()`
tangerine.resolve('forwardemail.net', 'A').then(console.log);
new Tangerine(options)
abortController
argument, which is an instance of AbortController. Note that :tangerine: Tangerine manages AbortController
usage internally – so you most likely won't need to pass your own (see index.js for more insight).new Tangerine()
are instances of dns.promises.Resolver
via class Tangerine extends dns.promises.Resolver { ... }
(namely for compatibility with projects such as cacheable-lookup).tangerine.cancel()
tangerine.getServers()
tangerine.lookup(hostname[, options])
tangerine.lookupService(address, port, abortController)
tangerine.resolve(hostname[, rrtype, options, abortController])
tangerine.resolve4(hostname[, options, abortController])
Tangerine supports a new ecsSubnet
property in the options
Object argument.
tangerine.resolve6(hostname[, options, abortController])
Tangerine supports a new ecsSubnet
property in the options
Object argument.
tangerine.resolveAny(hostname[, abortController])
tangerine.resolveCaa(hostname[, abortController]))
tangerine.resolveCname(hostname[, abortController]))
tangerine.resolveMx(hostname[, abortController]))
tangerine.resolveNaptr(hostname[, abortController]))
tangerine.resolveNs(hostname[, abortController]))
tangerine.resolvePtr(hostname[, abortController]))
tangerine.resolveSoa(hostname[, abortController]))
tangerine.resolveSrv(hostname[, abortController]))
tangerine.resolveTxt(hostname[, abortController]))
tangerine.reverse(ip[, abortController])
tangerine.setDefaultResultOrder(order)
tangerine.setServers(servers)
Similar to the options
argument from new dns.promises.Resolver(options)
invocation – :tangerine: Tangerine also has its own options with default dns
behavior mirrored. See index.js for more insight into how these options work.
Property | Type | Default Value | Description |
---|---|---|---|
timeout | Number | 5000 | Number of milliseconds for requests to timeout. |
tries | Number | 4 | Number of tries per server in servers to attempt. |
servers | Set | new Set(['1.1.1.1', '1.0.0.1']) | A set containing IP addresses for DNS queries. Defaults to Cloudflare's of 1.1.1.1 and 1.0.0.1 . |
undici | Object | Defaults to an Object with undici.method and undici.headers properties and values below | Default options to pass to undici. |
undici.method | String | Defaults to "GET" (must be either "GET" or "POST" ). | Default HTTP method to use for DNS over HTTP ("DoH") requests. |
undici.headers | Object | Defaults to { 'content-type': 'application/dns-message', 'user-agent': pkg.name + "/" + pkg.version, accept: 'application/dns-message' } . | Default HTTP headers to use for DNS over HTTP ("DoH") requests. |
protocol | String | Defaults to "https" . | Default HTTP protocol to use for DNS over HTTPS ("DoH") requests. |
dnsOrder | String | Defaults to "verbatim" for Node.js v17.0.0+ and "ipv4first" for older versions. | Sets the default result order of lookup invocations (see dns.setDefaultResultOrder for more insight). |
logger | Object | false | This is the default logger. We recommend using Cabin instead of using console as your default logger. Set this value to false to disable logging entirely (uses noop function). |
id | Number or Function | 0 | Default id to be passed for DNS packet creation. This could alternatively be a synchronous or asynchronous function that returns a Number (e.g. id: () => Tangerine.getRandomInt(1, 65534) ). |
concurrency | Number | os.cpus().length | Default concurrency to use for resolveAny lookup via p-map. The default value is the number of CPU's available to the system using the Node.js os module os.cpus() method. |
ipv4 | String | "0.0.0.0" | Default IPv4 address to use for HTTP agent localAddress if DNS server was an IPv4 address. |
ipv6 | String | "::0" | Default IPv6 address to use for HTTP agent localAddress if DNS server was an IPv6 address. |
ipv4Port | Number | undefined | Default port to use for HTTP agent localPort if DNS server was an IPv4 address. |
ipv6Port | Number | undefined | Default port to use for HTTP agent localPort if DNS server was an IPv6 address. |
cache | Map or Boolean | new Map() | Set this to false in order to disable caching. Default Map instance to use for caching. Entries are by type, e.g. map.set('TXT', new Keyv({}) ). If cache set values are not provided, then they will default to a new instance of Keyv . See cache setup and usage in index.js for more insight. You can iterate over Tangerine.TYPES if necessary to create a similar cache setup. |
returnHTTPErrors | Boolean | false | Whether to return HTTP errors instead of mapping them to corresponding DNS errors. |
smartRotate | Boolean | true | Whether to do smart server rotation if servers fail. |
defaultHTTPErrorMessage | String | "Unsuccessful HTTP response" | Default fallback message if statusCode returned from HTTP request was not found in http.STATUS_CODES. |
If you run into issues while using :tangerine: Tangerine, then these recommendations may help:
Set NODE_DEBUG=tangerine
environment variable flag when you start your app:
NODE_DEBUG=tangerine node app.js
Pass a verbose logger as the logger
option, e.g. logger: console
(see Options above).
Assuming you are not allergic, try eating a nutritious :tangerine: tangerine.
Contributors can run benchmarks locally by cloning the repository, installing dependencies, and running the benchmarks script:
git clone https://github.com/forwardemail/tangerine.git
cd tangerine
npm install
npm run benchmarks
You can also specify optional custom environment variables to test against real-world or locally running servers (instead of using mocked in-memory servers):
BENCHMARK_PROTOCOL="http" BENCHMARK_HOST="127.0.0.1" BENCHMARK_PORT="4000" BENCHMARK_PATH="/v1/test" npm run benchmarks
We have written extensive benchmarks to show that :tangerine: Tangerine has a faster resolve()
and reverse()
(and fast enough lookup()
) versus the native Node.js DNS module.
The initial release v1.0.0 had these benchmark results, which you can publicly view on GitHub CI actions logs:
> node benchmarks/lookup && node benchmarks/resolve && node benchmarks/reverse && node benchmarks/http
tangerine.lookup POST with caching using Cloudflare x 521 ops/sec ±186.87% (79 runs sampled)
tangerine.lookup POST without caching using Cloudflare x 252 ops/sec ±1.52% (79 runs sampled)
tangerine.lookup GET with caching using Cloudflare x 11,217 ops/sec ±1.75% (78 runs sampled)
tangerine.lookup GET without caching using Cloudflare x 259 ops/sec ±1.28% (84 runs sampled) <--------
dns.promises.lookup with caching using Cloudflare x 206,286 ops/sec ±0.92% (82 runs sampled)
dns.promises.lookup without caching using Cloudflare x 2,330 ops/sec ±1.86% (80 runs sampled)
Fastest without caching is: dns.promises.lookup without caching using Cloudflare
tangerine.resolve POST with caching using Cloudflare x 734 ops/sec ±190.07% (84 runs sampled)
tangerine.resolve POST without caching using Cloudflare x 234 ops/sec ±3.75% (82 runs sampled)
tangerine.resolve GET with caching using Cloudflare x 24,040 ops/sec ±1.93% (83 runs sampled)
tangerine.resolve GET without caching using Cloudflare x 215 ops/sec ±16.62% (75 runs sampled)
tangerine.resolve POST with caching using Google x 23,937 ops/sec ±2.04% (81 runs sampled)
tangerine.resolve POST without caching using Google x 213 ops/sec ±9.51% (71 runs sampled)
tangerine.resolve GET with caching using Google x 24,272 ops/sec ±1.74% (83 runs sampled)
tangerine.resolve GET without caching using Google x 257 ops/sec ±4.02% (80 runs sampled)
resolver.resolve with caching using Cloudflare x 158,842 ops/sec ±2.57% (84 runs sampled)
resolver.resolve without caching using Cloudflare x 8.02 ops/sec ±191.78% (41 runs sampled)
Fastest without caching is: tangerine.resolve GET without caching using Google <--------
tangerine.reverse GET with caching x 694 ops/sec ±189.48% (76 runs sampled)
tangerine.reverse GET without caching x 123 ops/sec ±90.74% (81 runs sampled)
resolver.reverse x 0.24 ops/sec ±86.12% (10 runs sampled)
dns.promises.reverse x 0.70 ops/sec ±164.50% (42 runs sampled)
Fastest without caching is: tangerine.reverse GET without caching <--------
http.request POST request x 384 ops/sec ±1.08% (84 runs sampled)
http.request GET request x 398 ops/sec ±0.83% (83 runs sampled)
undici GET request x 206 ops/sec ±5.59% (58 runs sampled)
undici POST request x 211 ops/sec ±4.44% (74 runs sampled)
axios GET request x 343 ops/sec ±1.97% (82 runs sampled)
axios POST request x 350 ops/sec ±3.35% (82 runs sampled)
got GET request x 325 ops/sec ±1.61% (81 runs sampled)
got POST request x 341 ops/sec ±2.86% (84 runs sampled)
fetch GET request x 657 ops/sec ±1.42% (82 runs sampled)
fetch POST request x 680 ops/sec ±1.21% (84 runs sampled)
request GET request x 370 ops/sec ±1.08% (85 runs sampled)
request POST request x 370 ops/sec ±0.88% (84 runs sampled)
superagent GET request x 380 ops/sec ±1.14% (83 runs sampled)
superagent POST request x 386 ops/sec ±1.04% (83 runs sampled)
phin GET request x 396 ops/sec ±0.86% (84 runs sampled)
phin POST request x 398 ops/sec ±0.83% (85 runs sampled)
Fastest is fetch POST request
NOTE: HTTP library benchmark tests above are not based on real-world usage; instead they are using mock libraries such as
nock
and undici'sMockAgent
. An actual HTTP server could be implemented in these benchmarks (pull request is welcome). See HTTP Library Benchmarks below for more insight into results with real-world servers.
> node benchmarks/lookup && node benchmarks/resolve && node benchmarks/reverse && node benchmarks/http
tangerine.lookup POST with caching using Cloudflare x 576 ops/sec ±188.97% (84 runs sampled)
tangerine.lookup POST without caching using Cloudflare x 62.80 ops/sec ±0.34% (75 runs sampled)
tangerine.lookup GET with caching using Cloudflare x 16,710 ops/sec ±0.27% (83 runs sampled)
tangerine.lookup GET without caching using Cloudflare x 60.59 ops/sec ±6.15% (75 runs sampled) <--------
dns.promises.lookup with caching using Cloudflare x 251,300 ops/sec ±0.66% (89 runs sampled)
dns.promises.lookup without caching using Cloudflare x 4,189 ops/sec ±0.65% (89 runs sampled)
Fastest without caching is: dns.promises.lookup without caching using Cloudflare <--------
tangerine.resolve POST with caching using Cloudflare x 627 ops/sec ±192.36% (90 runs sampled)
tangerine.resolve POST without caching using Cloudflare x 59.66 ops/sec ±5.69% (74 runs sampled)
tangerine.resolve GET with caching using Cloudflare x 33,813 ops/sec ±0.33% (90 runs sampled)
tangerine.resolve GET without caching using Cloudflare x 60.16 ops/sec ±4.03% (73 runs sampled)
tangerine.resolve POST with caching using Google x 1,184 ops/sec ±189.17% (90 runs sampled)
tangerine.resolve POST without caching using Google x 41.23 ops/sec ±7.30% (70 runs sampled)
tangerine.resolve GET with caching using Google x 33,811 ops/sec ±0.56% (91 runs sampled)
tangerine.resolve GET without caching using Google x 54.34 ops/sec ±5.71% (69 runs sampled)
resolver.resolve with caching using Cloudflare x 202,804 ops/sec ±0.39% (88 runs sampled)
resolver.resolve without caching using Cloudflare x 61.93 ops/sec ±5.76% (76 runs sampled)
Fastest without caching is: resolver.resolve without caching using Cloudflare <--------
tangerine.reverse GET with caching x 594 ops/sec ±192.60% (86 runs sampled)
tangerine.reverse GET without caching x 60.73 ops/sec ±3.06% (74 runs sampled)
resolver.reverse x 66.00 ops/sec ±0.91% (78 runs sampled)
dns.promises.reverse x 1.84 ops/sec ±190.54% (71 runs sampled)
Fastest without caching is: tangerine.reverse GET without caching <--------
http.request POST request x 438 ops/sec ±0.61% (86 runs sampled)
http.request GET request x 442 ops/sec ±0.64% (87 runs sampled)
undici GET request x 203 ops/sec ±3.67% (42 runs sampled)
undici POST request x 194 ops/sec ±3.77% (62 runs sampled)
axios GET request x 403 ops/sec ±1.67% (86 runs sampled)
axios POST request x 414 ops/sec ±0.65% (88 runs sampled)
got GET request x 391 ops/sec ±1.63% (85 runs sampled)
got POST request x 403 ops/sec ±0.90% (85 runs sampled)
fetch GET request x 794 ops/sec ±2.32% (84 runs sampled)
fetch POST request x 821 ops/sec ±0.89% (86 runs sampled)
request GET request x 423 ops/sec ±0.75% (86 runs sampled)
request POST request x 426 ops/sec ±0.78% (86 runs sampled)
superagent GET request x 435 ops/sec ±0.79% (87 runs sampled)
superagent POST request x 437 ops/sec ±0.82% (88 runs sampled)
phin GET request x 443 ops/sec ±0.64% (86 runs sampled)
phin POST request x 445 ops/sec ±0.60% (86 runs sampled)
Fastest is fetch POST request
NOTE: HTTP library benchmark tests above are not based on real-world usage; instead they are using mock libraries such as
nock
and undici'sMockAgent
. An actual HTTP server could be implemented in these benchmarks (pull request is welcome). See HTTP Library Benchmarks below for more insight into results with real-world servers.
You can also run the benchmarks yourself.
Provided below are additional benchmark tests we have run:
Node v16.18.1 on MacBook Air M1 16GB (without VPN):
❯ node --version
v16.18.1
❯ node benchmarks/resolve
tangerine POST with caching using Cloudflare x 1,044 ops/sec ±193.21% (90 runs sampled)
tangerine POST without caching using Cloudflare x 40.93 ops/sec ±53.83% (50 runs sampled)
tangerine GET with caching using Cloudflare x 73,896 ops/sec ±0.27% (90 runs sampled)
tangerine GET without caching using Cloudflare x 38.66 ops/sec ±21.98% (55 runs sampled)
tangerine POST with caching using Google x 992 ops/sec ±193.33% (87 runs sampled)
tangerine POST without caching using Google x 31.98 ops/sec ±21.35% (58 runs sampled)
tangerine GET with caching using Google x 74,410 ops/sec ±0.22% (91 runs sampled)
tangerine GET without caching using Google x 41.52 ops/sec ±18.91% (56 runs sampled)
dns.promises.resolve without caching using Cloudflare x 25.46 ops/sec ±100.19% (50 runs sampled)
dns.promises.resolve with caching using Cloudflare x 505,956 ops/sec ±2.34% (89 runs sampled)
Fastest without caching is: tangerine GET without caching using Google, tangerine GET without caching using Cloudflare
Node v16.18.1 on MacBook Air M1 16GB (with DNS blackholed VPN) – this highlights the DNS blackhole problem:
❯ node --version
v16.18.1
❯ node benchmarks/resolve
tangerine POST with caching using Cloudflare x 185 ops/sec ±195.50% (88 runs sampled)
tangerine POST without caching using Cloudflare x 6.48 ops/sec ±35.98% (35 runs sampled)
tangerine GET with caching using Cloudflare x 824 ops/sec ±193.77% (90 runs sampled)
tangerine GET without caching using Cloudflare x 8.66 ops/sec ±8.22% (46 runs sampled)
tangerine POST with caching using Google x 205 ops/sec ±195.45% (88 runs sampled)
tangerine POST without caching using Google x 7.20 ops/sec ±12.28% (40 runs sampled)
tangerine GET with caching using Google x 690 ops/sec ±194.12% (90 runs sampled)
tangerine GET without caching using Google x 7.85 ops/sec ±9.53% (42 runs sampled)
dns.promises.resolve without caching using Cloudflare x 0.09 ops/sec ±5.10% (5 runs sampled) <--------
dns.promises.resolve with caching using Cloudflare x 0.09 ops/sec ±5.13% (5 runs sampled) <--------
Fastest without caching is: tangerine GET without caching using Cloudflare
Node v18.4.2 on MacBook Air M1 16GB (without VPN):
❯ node --version
v18.4.2
❯ node benchmarks/resolve
tangerine POST with caching using Cloudflare x 817 ops/sec ±193.86% (89 runs sampled)
tangerine POST without caching using Cloudflare x 42.57 ops/sec ±38.18% (62 runs sampled)
tangerine GET with caching using Cloudflare x 853 ops/sec ±193.79% (91 runs sampled)
tangerine GET without caching using Cloudflare x 41.13 ops/sec ±57.37% (48 runs sampled)
tangerine POST with caching using Google x 1,488 ops/sec ±192.10% (90 runs sampled)
tangerine POST without caching using Google x 38.46 ops/sec ±12.08% (59 runs sampled)
tangerine GET with caching using Google x 74,240 ops/sec ±0.31% (90 runs sampled)
tangerine GET without caching using Google x 39.20 ops/sec ±23.52% (58 runs sampled)
dns.promises.resolve without caching using Cloudflare x 59.11 ops/sec ±13.96% (63 runs sampled)
dns.promises.resolve with caching using Cloudflare x 529,961 ops/sec ±0.33% (91 runs sampled)
Fastest without caching is: dns.promises.resolve without caching using Cloudflare, tangerine GET without caching using Cloudflare
Node v18.4.2 on MacBook Air M1 16GB (with DNS blackholed VPN) – this highlights the DNS blackhole problem:
❯ node --version
v18.4.2
❯ node benchmarks/resolve
tangerine POST with caching using Cloudflare x 193 ops/sec ±195.49% (91 runs sampled)
tangerine POST without caching using Cloudflare x 8.44 ops/sec ±9.34% (45 runs sampled)
tangerine GET with caching using Cloudflare x 829 ops/sec ±193.83% (88 runs sampled)
tangerine GET without caching using Cloudflare x 7.44 ops/sec ±24.67% (45 runs sampled)
tangerine POST with caching using Google x 255 ops/sec ±195.33% (91 runs sampled)
tangerine POST without caching using Google x 4.59 ops/sec ±77.88% (26 runs sampled)
tangerine GET with caching using Google x 794 ops/sec ±193.95% (92 runs sampled)
tangerine GET without caching using Google x 7.69 ops/sec ±11.23% (42 runs sampled)
dns.promises.resolve without caching using Cloudflare x 0.09 ops/sec ±6.41% (5 runs sampled) <--------
dns.promises.resolve with caching using Cloudflare x 0.09 ops/sec ±6.41% (5 runs sampled) <--------
Fastest without caching is: tangerine POST without caching using Cloudflare, tangerine GET without caching using Cloudflare
Also see this write-up on UDP-based DNS versus DNS over HTTPS ("DoH") benchmarks.
Speed could be increased by switching to use undici streams and getStream.buffer (pull request is welcome).
Originally we wrote this library using got – however after running benchmarks and learning of how performant undici is, we weren't happy – and we rewrote it with undici. Here are test results from the latest versions of all HTTP libraries against our real-world API (both client and server running locally):
Node v16.18.1 on MacBook Air M1 16GB (using real-world API server):
❯ node --version
v16.18.1
❯ BENCHMARK_HOST="127.0.0.1" BENCHMARK_PORT="4000" BENCHMARK_PATH="/v1/test" node benchmarks/http
http.request POST request x 860 ops/sec ±6.33% (75 runs sampled)
http.request GET request x 978 ops/sec ±5.17% (83 runs sampled)
undici GET request x 2,732 ops/sec ±4.14% (83 runs sampled)
undici POST request x 1,204 ops/sec ±5.01% (81 runs sampled)
axios GET request x 855 ops/sec ±5.45% (81 runs sampled)
axios POST request x 723 ops/sec ±15.28% (71 runs sampled)
got GET request x 1,355 ops/sec ±16.60% (63 runs sampled)
got POST request x 93.65 ops/sec ±181.51% (29 runs sampled)
fetch GET request x 949 ops/sec ±40.26% (45 runs sampled)
fetch POST request x 672 ops/sec ±22.43% (67 runs sampled)
request GET request x 960 ops/sec ±50.90% (48 runs sampled)
request POST request x 612 ops/sec ±45.48% (57 runs sampled)
superagent GET request x 126 ops/sec ±188.34% (29 runs sampled)
superagent POST request x 747 ops/sec ±18.16% (67 runs sampled)
phin GET request x 374 ops/sec ±147.42% (57 runs sampled)
phin POST request x 566 ops/sec ±38.08% (51 runs sampled)
Fastest is undici GET request
Node v18.14.2 on MacBook Air M1 16GB (using real-world API server):
❯ node --version
v18.14.2
❯ BENCHMARK_HOST="127.0.0.1" BENCHMARK_PORT="4000" BENCHMARK_PATH="/v1/test" node benchmarks/http
http.request POST request x 765 ops/sec ±9.83% (72 runs sampled)
http.request GET request x 1,000 ops/sec ±3.88% (85 runs sampled)
undici GET request x 2,740 ops/sec ±5.92% (78 runs sampled)
undici POST request x 1,247 ops/sec ±0.61% (88 runs sampled)
axios GET request x 792 ops/sec ±7.78% (76 runs sampled)
axios POST request x 717 ops/sec ±13.85% (69 runs sampled)
got GET request x 1,234 ops/sec ±21.10% (67 runs sampled)
got POST request x 113 ops/sec ±168.45% (37 runs sampled)
fetch GET request x 977 ops/sec ±38.12% (51 runs sampled)
fetch POST request x 708 ops/sec ±23.64% (65 runs sampled)
request GET request x 1,152 ops/sec ±40.48% (49 runs sampled)
request POST request x 947 ops/sec ±1.35% (86 runs sampled)
superagent GET request x 148 ops/sec ±139.32% (31 runs sampled)
superagent POST request x 571 ops/sec ±40.14% (54 runs sampled)
phin GET request x 252 ops/sec ±158.51% (50 runs sampled)
phin POST request x 714 ops/sec ±17.39% (62 runs sampled)
Fastest is undici GET request
Name | Website |
---|---|
Forward Email | https://forwardemail.net |
FAQs
Tangerine is the best Node.js drop-in replacement for dns.promises.Resolver using DNS over HTTPS ("DoH") via undici with built-in retries, timeouts, smart server rotation, AbortControllers, and caching support for multiple backends (with TTL and purge sup
The npm package tangerine receives a total of 957 weekly downloads. As such, tangerine popularity was classified as not popular.
We found that tangerine demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.