Differences

This shows you the differences between two versions of the page.

--- advanced-dhcpdns [2022/03/09 21:03] – [DHCP/DNS] rs232
+++ advanced-dhcpdns [2022/04/20 18:26] – rs232
@@ Line 27: / Line 27: @@
 **Use Stubby (DNS-over-TLS):** This enhances DNS privacy. Checking this enables Stubby, a DNS Stub resolver. DNS over TLS (or "DoT") sends DNS queries over a secure connection, encrypted with TLS. TLS is the same technology that encrypts secure Web traffic. This prevents third parties from seeing your DNS queries.
+When Stubby is enabled some extra options are appearing on your configuration:
+{{:pasted:20220420-181042.png}}
+** Upstream resolvers:** You can specify here the upstream servers responsible to perform the actual name resolution.
+** Priority:**
+  * Strict-Order = prefer Stubby but if this is experiencing issue fail back to "other way of resolve names" e.g. standard DNS resolution
+  * No-Resolv = If Stubby fails or has issue you will want DNS resolution not to be failed back anywhere. A.k.a. Stubby or nothing.
+  * None = This option adds stubby as a resolution method for the build in dnsmasq. Note this doesn't guarantee encryption by itself.
+** Local Port:** The port number where Stubby is serving clients. Also note the only client for Stubby will actually be dnsmasq and this latter serves the end clients.
+** Log Level:** Define here the log verbosity needed.
+** Force TLS1.3:** Impose the usage of the latest TLS version for encryption (must be supported by the upstream).
 **WINS (for DHCP):** Here, you can specify the IP address of a WINS Server which will be given to DHCP clients. This does NOT actually enable the WINS service. FreshTomato's WINS Server function is enabled on the //USB and NAS/[[:nas-samba|File Sharing]]// menu.

FreshTomato Wiki

User Tools

Site Tools

Differences

Page Tools