3 ms·
I am using TLS. The OpenBSD box has its own dhcpd and dns server. The leases it offers point to itself for dns in the LAN. Then it makes forwarded queries over
by asveikau 6y ago
I am using TLS.
The OpenBSD box has its own dhcpd and dns server. The leases it offers point to itself for dns in the LAN. Then it makes forwarded queries over TLS.
- gen3 6y agoWhat are you using to do DNS over TLS?
- 0xdeadb00f 6y agoI would assume unwind, as they're using OpenBSD. https://man.openbsd.org/unwind.conf https://man.openbsd.org/unwind.conf lists some Do-T-related config options.
- asveikau 6y agoActually unbound. I forget why I chose this over unwind. I had a reason once. Set it up years ago and didn't touch the config files. Maybe the initial setup predated unwind and I had something working already...? Totally off topic, but I was thinking of replacing it with something I wrote myself. I had some downtime earlier this year and I wrote a forwarding dns server that can speak TLS on both ends. Was simple to do. But needs some polishing before I throw it on github or use it at home.
- 0xdeadb00f 6y agoHey, that's really cool!