mirror of
https://github.com/novatiq/packages.git
synced 2026-07-30 23:33:06 +01:00
Tony Ambardarandguidosarducci
0425d9198a
Retain the upstream value since privacy is usually the key user motivation for using DNS-over-TLS, and simply note that those encountering sub-optimal routing may consider disabling the setting. Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
40 lines
809 B
YAML
40 lines
809 B
YAML
#NOTE: See '/etc/stubby/stubby.yml.default' for original config file and descriptions
|
|
|
|
resolution_type: GETDNS_RESOLUTION_STUB
|
|
|
|
dns_transport_list:
|
|
- GETDNS_TRANSPORT_TLS
|
|
|
|
tls_authentication: GETDNS_AUTHENTICATION_REQUIRED
|
|
|
|
tls_query_padding_blocksize: 128
|
|
|
|
edns_client_subnet_private : 1
|
|
|
|
round_robin_upstreams: 0
|
|
|
|
idle_timeout: 10000
|
|
|
|
listen_addresses:
|
|
- 127.0.0.1@5453
|
|
- 0::1@5453
|
|
|
|
upstream_recursive_servers:
|
|
# IPv6 addresses
|
|
# # Cloudflare IPv6
|
|
- address_data: 2606:4700:4700::1111
|
|
tls_auth_name: "cloudflare-dns.com"
|
|
|
|
# # Quad 9 IPv6
|
|
# - address_data: 2620:fe::10
|
|
# tls_auth_name: "dns.quad9.net"
|
|
|
|
# IPv4 addresses
|
|
# # Cloudflare servers
|
|
- address_data: 1.1.1.1
|
|
tls_auth_name: "cloudflare-dns.com"
|
|
|
|
# Quad 9 service
|
|
# - address_data: 9.9.9.10
|
|
# tls_auth_name: "dns.quad9.net"
|