Domain Over TLS : dnsmasq & stubby

Hi all, i have OpenWrt 24.10.0 (r28427-6df0e3d02a).

I'm using dnsmasq.

I'm using Luci to configure DNS with Network -> Interfaces.
And click on one "Edit Button" for one interface.
Click on Advanced Settings -> Use custom DNS servers : XXX.XXX.XXX.XXX

How it's possible to do DNS Over TLS DoT with dnsmasq ?

I seen this guide, it's a good manner ?

https://openwrt.org/docs/guide-user/services/dns/dot_dnsmasq_stubby

Thanks for advices

It's a good guide. The following part tells you how to do it via the Luci web interface.

https://openwrt.org/docs/guide-user/services/dns/dot_dnsmasq_stubby#luci_web-interface_instructions

consider DoH, it'll probably be easier on the RAM and storage.

https://openwrt.org/docs/guide-user/services/dns/doh_dnsmasq_https-dns-proxy

3 Likes

https://github.com/openwrt/packages/blob/master/net/stubby/files/README.md - use original stubby's documentation.

1 Like

Indeed it takes less storage because stubby depends on libopenssl3. But stubby is smaller in RAM.

2 Likes