News for hackers. Stuff that matters.

A comment on Wikimedia DNS. Parent comment

Re:Wikimedia DNS by aesh2Xa1 on Wednesday September 06, 2023 @10:06PM (#37413852)
Why not permit systemd-resolved to act as the local resolver along with resolved.conf? You can use Unbound listening on whatever is free on (ipv4)127.0.0.0/8 and (ipv6)[:1]:9953 (or any other free port), and configure resolved.conf to use that local address as the "upstream" DNS= option.

You're probably going to still need Unbound to talk to an encrypted DNS server on the Internet (DoH or DoT), or else your ISP will be capable of intercepting and manipulating your queries.

https://www.freedesktop.org/software/systemd/man/systemd-res...

https://www.freedesktop.org/software/systemd/man/resolved.co...

[ Parent | on HN ]
Re:Wikimedia DNS by 0cf8612b2e1e on Wednesday September 06, 2023 @10:18PM (#37413940)
That feels like a brilliant strategy. Theoretically only ever requiring a one line configuration change if I ever need to reverse it.

It would be a lot better if systemd would play nicely, but this is pretty minimal jank.

[ Parent | on HN ]