<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><span class="css-16my406 r-1qd0xha r-ad9z0x css-901oao r-bcqeeo r-qvutc0">Dear Remi and Group,</span><div class=""><div class=""><br class=""></div><div class="">this is only partially an dnsdist question, but probably some folks here might have looked into this.</div><div class=""><br class=""></div><div class=""><div class="">1. when trying out dnsmasq/stubby [1],[2] to tstart and later also to talk to a DNSdist instance - seems to work fine from a newly rebuilt openwrt 18.06.02</div><div class=""><div class="">root@OpenWrt:~# stubby</div><div class="">[13:33:12.016680] STUBBY: Read config from file /etc/stubby/stubby.yml</div><div class="">[13:33:12.016787] STUBBY: DNSSEC Validation is OFF</div><div class="">[13:33:12.016794] STUBBY: Transport list is:</div><div class="">[13:33:12.016797] STUBBY: - TLS</div><div class="">[13:33:12.016800] STUBBY: Privacy Usage Profile is Strict (Authentication required)</div><div class="">[13:33:12.016804] STUBBY: (NOTE a Strict Profile only applies when TLS is the ONLY transport!!)</div><div class="">[13:33:12.016807] STUBBY: Starting DAEMON....</div><div class=""><br class=""></div></div><div class="">Question are who is is running this running also with older OpenWRT…</div><div class=""><br class=""></div><div class="">a) does anyone have DNSdist working with a stubby built from a LEDE 17.01 [3] box?</div><div class="">b) <span class="css-16my406 r-1qd0xha r-ad9z0x css-901oao r-bcqeeo r-qvutc0">have you seen a working (and non-performance breakdown) way to install a very simple binary openWRT package that allows DNS-over-TLS with DNSdist in a silmilarly easy way as https_dns_proxy [3] does?</span></div><div class=""><div class="">IIRC it can’t work with DNSdist becasue of DNSdist not supporting application/dns-json as content type - or can DNSdist do that by some currently not (yet?) published extension/config flag?</div></div></div><div class="">c) or is the only way to get this work on LEDE 17.01 using unbound [4] (nothing to be said against unbound, except that there might be a simpler way)? </div><div class=""><br class=""></div><div class="">BR, Normen</div><div class=""><br class=""></div><div class="">[1] <a href="https://dnsprivacy.org/wiki/display/DP/DNS+Privacy+Daemon+-+Stubby" class="">https://dnsprivacy.org/wiki/display/DP/DNS+Privacy+Daemon+-+Stubby</a> </div><div class="">[2] <a href="https://openwrt.org/docs/guide-user/services/dns/dot_dnsmasq_stubby" class="">https://openwrt.org/docs/guide-user/services/dns/dot_dnsmasq_stubby</a></div><div class="">[3] <font color="#0068da" class=""><u class=""><a href="https://github.com/aarond10/https_dns_proxy" class="">https://github.com/aarond10/https_dns_proxy</a></u></font></div></div><div class="">[4] <a href="https://openwrt.org/docs/guide-user/services/dns/dot_unbound" class="">https://openwrt.org/docs/guide-user/services/dns/dot_unbound</a></div></body></html>