Hi there!
I have released a new beta with DNS over TLS.
You wanna test it please go ahead, you can find the latest image here:
GNUton's Asus Merlin changelog Date: September 19, 2021 Release: 386.03_2-gnuton3_beta1 CHANGED: Added DNS Sec and DNS over TLS for VDSL
github.com
BTW you can now find DNS-over-TLS profile settins ing Advanced_VDSL_Content page.
I gave it a quick try and I have seen that changing the DNS servers in the list actually reflects to the network clients,
but
https://tenta.com/test/ still says TLS is false.
So my guess is there is something not correct in my configuration or the test is not correct.
I am not expert of stubby nor of DoT, so if anybody has an understandig of what can be wrong, please let me know.
Here is the stubby config
# ps | grep stubby
15441 xxx 4456 S /usr/sbin/stubby -g -C /etc/stubby/stubby.yml
# cat /etc/stubby/stubby.yml
resolution_type: GETDNS_RESOLUTION_STUB
dns_transport_list:
- GETDNS_TRANSPORT_TLS
tls_authentication: GETDNS_AUTHENTICATION_REQUIRED
tls_query_padding_blocksize: 128
appdata_dir: "/var/lib/misc"
resolvconf: "/tmp/resolv.conf"
edns_client_subnet_private: 1
round_robin_upstreams: 1
idle_timeout: 9000
tls_connection_retries: 2
tls_backoff_time: 900
timeout: 3000
listen_addresses:
- 127.0.1.1@53
upstream_recursive_servers:
- address_data: 8.8.8.8
tls_port: 853
tls_auth_name: "dns.google"