openmptcprouter icon indicating copy to clipboard operation
openmptcprouter copied to clipboard

Published 20 hours ago • verified publisher icon Ysurac

Recursive DNS on VPS side.

Open k0gen opened this issue 4 years ago • 5 comments

Wouldn't it be a good idea to have unbound service running on VPS side? This would be preferable use case especially when running with Pi-hole. The UCI interface is there so how about adding an option to switch between local/remote unbound instance?

k0gen avatar Mar 07 '21 09:03 k0gen

Unbound is used on router side because DNS must be usable when VPS is not.

Ysurac avatar Mar 07 '21 12:03 Ysurac

For Pi-Hole there is a script available in the doc, and when it's installed Pi-Hole is used without issues.

Ysurac avatar Mar 07 '21 12:03 Ysurac

I guess I should have added "for better privacy" in the beginning.

Benefit: Privacy - as you're directly contacting the responsive servers from your VPS the traffic stays outside, no server can fully log the exact paths you're going, as e.g. the Google DNS servers will only be asked if you want to visit a Google website, but not if you visit the website of your favorite newspaper, etc.

k0gen avatar Mar 08 '21 06:03 k0gen

By default when VPS is enable, DNS traffic use the VPS as exit like all traffic. Also root DNS servers are always used by default because VPS providers DNS are not always good or use some public DNS. But if you really want that, Pi-Hole can be installed on VPS but if I remember it only use some public DNS, so not really good for privacy.

Ysurac avatar Mar 08 '21 07:03 Ysurac

Yes that is correct. The idea is to become your own upstream DNS by using Unbound on VPS. Here is my VPS Pi-hole settings regarding that: Zrzut ekranu 2021-03-8 o 10 33 59

k0gen avatar Mar 08 '21 09:03 k0gen