Hi,
I want to use Unbound as recursive DNS server.
Based on available documentation it can be either serial dnsmasq or parallel dnsmasq. (Unbound and odhcpd is currently not an option.)
In my understanding serial dnsmasq is comparable to setup Pihole with unbound as recursive DNS server that is documented here.
OpenWrt documentation is talking about several disadvantages of serial dnsmasq and it makes sense.
However I wonder why Pihole is advising to setup serial dnsmasq.
What are your thoughts on this?
In my understanding parallel dnsmasq is using dnsmasq's DHCP functionality only, but DNS functionality is not disabled but set to a port that's typically not used for DNS requests. Is this correct?
Another question is related to root.hints file.
In my understanding this file is key to use Unbound as recursive DNS server.
Why is OpenWrt unbound documentation not talking about this ?
Is there any opkg package providing this root.hints file?
Or must I download it manually?
I would use parallel to reduce the number of “hops” for a DNS lookup from the LAN. If you’re going to do ad-blocking, do it in Unbound.
Pi-Hole only works with their version of dnsmasq, and you still need an upstream resolver, so there isn’t much choice besides serial in that scenario.
Unbound has built-in root.hints if no other file is passed in the configuration.
I found statements in the internet that says: root.hint file should be updated every quarter or half year.
Assuming this is true, how does the update work with OpenWrt's unbound package?
Will the package be upgraded once a new root.hint file is released?
My favorite setup is parallel dnsmasq; in the relevant documentation there's this statement:
"In this case, Unbound serves your local network directly for all purposes. It will look over to dnsmasq for DHCP-DNS resolution. Unbound is generally accessible on port 53, and dnsmasq is only accessed at 127.0.0.1#1053 by Unbound."
Here's my question:
How does Unbound know to communicate with 127.0.0.1#1053?
I cannot find any relevant configuration in /etc/config/unbound pointing to this port.