[dnstap] Adding support for DoT and DoH

[Vladimír Čunát]

On 12/7/20 10:45 PM, Chris Mikkelson wrote:
> DoH may also be UDP (QUIC) if used with HTTP/3

Hmm, it's true that even currently you can recognize the DoT and DoH 
protocols by port (in typical installations).  Neither that approach nor 
the proposed addition would help to differentiate between DoH/2 and 
DoH/3.  I'm not sure how interesting the distinction will be (in future, 
probably not really deployed with dnstap ATM).

I can imagine instead having various smaller flags like 
is-connection-oriented, is-encrypted, has-http, ... but that would seem 
a significant change from the current design, so perhaps something like 
those dot_info and doh_info later?

--Vladimir