3 ms·
What's wrong with opkg install unbound? It's robust, doesn't require maintenance, and already available an an optional install in OpenWRT. The reason people do
by xorcist 8y ago
What's wrong with opkg install unbound? It's robust, doesn't require maintenance, and already available an an optional install in OpenWRT.
The reason people don't use it is probably just that it isn't default. Some captive portals mess with DNS resolution and it's probably easier for OpenWRT to just let them.
- lazyjones 8y ago> What's wrong with opkg install unbound? It's robust, doesn't require maintenance, Good joke. It's written in C, so in addition to typical protocol/logic flaws, it'll have its share of security and memory leak problems. No maintenance? Have a look at https://nlnetlabs.nl/svn/unbound/tags/release-1.9.1/doc/Changelog https://nlnetlabs.nl/svn/unbound/tags/release-1.9.1/doc/Chan... and its security advisories... Regular updates are necessary.
- upofadown 8y agoHere is a list (and some discussion) of the 4 CVEs that unbound has had starting in 2011: * https://nlnetlabs.nl/projects/unbound/security-advisories/ https://nlnetlabs.nl/projects/unbound/security-advisories/ Nothing there looks particularly scary to me.