Will OpenWrt do what want?

Installing and Using OpenWrt Network and Wireless Configuration
1

I've never used OpenWrt. Skimming through the docs it looks like it may do what I want. I currently a separate name server and dhcp server on my network running on Linux. I'm very comfortable with Linux and the configuration of DHCP and BIND.

Will OpenWrt give me the same level of access to configure DNS and DHCP as I do now with Linux?

Is it advisable to use my ISP's router for the internet connection and a separate WiFi router for OpenWrt or can I have one device?

If there is any docs for a new comer please let me know.

2

Yes! It will do what you want.

Start Here

2 Likes
3

BIND has been compiled and packaged to run on OpenWrt as an optional package. OpenWrt uses dnsmasq for DHCP(v4) and a custom program called odhcpd for V6; I'm not sure what other DHCP packages are available.

1 Like
4

IC DHCPD is EOL, OpenWRT setup is quite elegant that dnsmasq automatically fills local DNS zone for DHCP clients, if you want it you can front dnsmasq for local domains with BIND.

5

So are you looking for a DHCP server and a DNS server? Yes OpenWRT can do both and has a lot of configuration options. (It just uses dnsmasq)

6

Instead of Dnsmasq you can also use other pieces of software, for example odhcpd for DHCP and Unbound for DNS.

1 Like
7

True but I believe dnsmasq is the default. Is there any benefit to using odhcpd and unbound? I see that unbound supports encrypted DNS.

8

More than 3MB dns cache?

9

That would be a decent reason. I figured it probably is mostly up to personal preference.

10

Get bind "rndc status" and count dhcp leases, if it is > 10k cache entries, public soa records, or more than one dhcp subnet you need some detailed setup, otherwise just save leases and zone content and try to figure out how to load them into openwrt dnsmasq.

11

I haven't seen this part addressed...

The simple answer is: "it depends"... because there are many contextual things we don't know about your environment.

That said, generally, if you can remove the ISP router from the equation entirely and use OpenWrt, that's often the best situation. But if your ISP requires their device and/or it is a combo unit that has a modem (cable/DSL/cellular/fiber ONT), you may not have an option to eliminate that hardware. The next best thing is to put that ISP device into bridge mode so that it simply acts as a modem/media converter and doesn't do any routing.

The above assumes that you want a more secure/flexible router. And it also assumes that the hardware you have for OpenWrt is sufficiently powerful for your ISP connection speed. If your OpenWrt device is older or lower-spec than your ISP router (and the ISP speeds you expect), the equation might be different. Also, if you have VOIP or IPTV services that run through the ISP device, that also plays into the requirements.

12

Also Unbound, is a full DNS resolver which can talk directly to the DNS root servers.

Dnsmasq is only a forwarder, it will ask your nearest DNS (mostly the ISP's servers or Google).

Thus, a forwarders answers are an implicit trust in the DNS server chain that you are using. It's in that sense less secure that it may not return what the root servers would return.

Furthermore, a resolver can use hardening / cryptography techniques to avoid plaintext and verify communication through e.g. DNSSEC. Also better than its forwarder counterpart.

On the flip side, it will use more resources to run.

13

OpenWRT is Linux, just a different flavour, so, yes for ur first question.

For the second question, get accustom to Openwrt and see what best fit.

Most updated docs online and forum, some german lang. printed docs on amazon availlable also but not up to date.

14

Thank you for all the helpful advice.