Unbound

From DD-WRT Wiki

(Difference between revisions)
Jump to: navigation, search
Revision as of 08:31, 10 July 2018 (edit)
Mile-Lile (Talk | contribs)
(New page: [https://www.unbound.net/ Unbound] is a validating, '''recursive''', and caching DNS resolver. Unbound has supplanted the Berkeley Internet Name Domain (BIND) as the default, base-system ...)
← Previous diff
Revision as of 08:32, 10 July 2018 (edit) (undo)
Mile-Lile (Talk | contribs)

Next diff →
Line 7: Line 7:
You can check whether your Unbound resolver validates DNSSEC signatures on [https://dnssec.vs.uni-due.de/ this link] You can check whether your Unbound resolver validates DNSSEC signatures on [https://dnssec.vs.uni-due.de/ this link]
 +
 +Whether your DNS is leaking you can check [http://dnsleak.com/ here]

Revision as of 08:32, 10 July 2018

Unbound is a validating, recursive, and caching DNS resolver. Unbound has supplanted the Berkeley Internet Name Domain (BIND) as the default, base-system name server in several open source projects, where it is perceived as smaller, more modern, and more secure for most applications. On dd-wrt it works just out of the box. The only thing you have to do is to tick Recursive DNS Resolving on index.asp page (Setup>Basic Setup tab) of your dd-wrt. Make sure you have working time/date (ntp client) otherwise Unbound will not work after reboot (DNSSEC validateing needs correct local time). It is important that you use Server IP for router NTP Client not hostname (e.g. 193.25.222.240 instead of 0.europe.pool.ntp.org).

A default configuration is stored under /tmp/unbound.conf

You can check whether your Unbound resolver validates DNSSEC signatures on this link

Whether your DNS is leaking you can check here