Skip to content

Instantly share code, notes, and snippets.

@xenialaq
Created October 20, 2020 17:04
Show Gist options
  • Save xenialaq/3b5a8bfbcad8cd7ad319123ca18ead47 to your computer and use it in GitHub Desktop.
Save xenialaq/3b5a8bfbcad8cd7ad319123ca18ead47 to your computer and use it in GitHub Desktop.
Stubby's uci config for OpenWrt with RPI running as a wlan client
config stubby 'global'
option manual '0'
option trigger 'wwan'
# option triggerdelay '2'
list dns_transport 'GETDNS_TRANSPORT_TLS'
option tls_authentication '1'
option tls_query_padding_blocksize '256'
# option tls_connection_retries '2'
# option tls_backoff_time '3600'
# option timeout '5000'
# option dnssec_return_status '0'
option appdata_dir '/var/lib/stubby'
# option trust_anchors_backoff_time 2500
# option dnssec_trust_anchors '/var/lib/stubby/getdns-root.key'
option edns_client_subnet_private '0'
option idle_timeout '10000'
option round_robin_upstreams '1'
list listen_address '127.0.0.1@5453'
list listen_address '0::1@5453'
option log_level '7'
# option command_line_arguments ''
# option tls_cipher_list 'EECDH+AESGCM:EECDH+CHACHA20'
# option tls_ciphersuites 'TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256'
# option tls_min_version '1.2'
# option tls_max_version '1.3'
# Upstream resolvers are specified using 'resolver' sections.
config resolver
option address '185.222.222.222'
option tls_auth_name 'dns.sb'
config resolver
option address '185.184.222.222'
option tls_auth_name 'dns.sb'
config resolver
option address '2a09::0'
option tls_auth_name 'dns.sb'
config resolver
option address '2a09::1'
option tls_auth_name 'dns.sb'
config resolver
option address '174.138.29.175'
option tls_auth_name 'dot.tiar.app'
config resolver
option address '2400:6180:0:d0::5f73:4001'
option tls_auth_name 'dot.tiar.app'
config resolver
option address '91.239.100.100'
option tls_auth_name 'anycast.censurfridns.dk'
config resolver
option address '2001:67c:28a4:0:0:0:0:0'
option tls_auth_name 'anycast.censurfridns.dk'
config resolver
option address '89.233.43.71'
option tls_auth_name 'unicast.censurfridns.dk'
config resolver
option address '2a01:3a0:53:53:0:0:0:0'
option tls_auth_name 'unicast.censurfridns.dk'
@xenialaq
Copy link
Author

# nano /etc/config/stubby
# uci commit stubby
# /etc/init.d/stubby restart

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment