Miscellaneous

Working with statistics

BinaryThe logsDNS Proxy generates binary logs, which are stored directly on the SafeDNS SecurityShield server. OurA solutiondedicated includes aparsing module that parsesprocesses these logs and exports themthe resulting data to an external DBMS for further analysis and report generation. Currently,The theremodule isincludes a connector for exporting logs to the ClickHouse DBMS,ClickHouse, which provides the best performance for this typedata oftype, data. However, if needed,but logs can also be exported to other databases if required.

The local binary log storage acts as well.a Thebuffer: if the connection to ClickHouse is temporarily lost, logs generated during the outage are retained on disk and automatically exported once connectivity is restored. No data is lost during short interruptions, provided the local storage on the Shield server does not become completely full.

Although the statistics module is not essential for the core functionalityfiltering of SafeDNS Security, but without it,functionality, it is impossibleindispensable tofor assessassessing system performance orand investigateinvestigating incidents effectively.

Note on HTTPS block pages

To display the built‑in block page for HTTPS requests, the SafeDNS root certificate must be added to the trusted certificate store on every end user device. Without the certificate, web browsers cannot validate the block page’s TLS certificate; instead of the block page, users will see a TLS/SSL error. Access to the requested resource will still be denied.
Displaying the block page over HTTP does not require the certificate.
If an externally hosted block page is used, certificate requirements depend on your own hosting configuration.