+
# Stubby for OpenWRT
## Stubby Description
uci add_list dhcp.@dnsmasq[-1].server='127.0.0.1#5453'
uci dhcp.@dnsmasq[-1].noresolv=1
- uci commit
+ uci commit && reload_config
The same outcome can be achieved in the LUCI web interface as follows:
uci set network.wan.dns='127.0.0.1'
uci set network.wan6.peerdns='0'
uci set network.wan6.dns='0::1'
- uci commit
+ uci commit && reload_config
The same outcome can also be achieved using the LUCI web interface as follows:
which can be done by editing the file directly or by executing the commands:
uci set stubby.global.dnssec_return_status=1
- uci commit
+ uci commit && reload_config
With stubby performing DNSSEC validation, dnsmasq needs to be configured to
proxy the DNSSEC data to clients. This requires setting the option `proxydnssec`
the following commands:
uci set dhcp.@dnsmasq[-1].proxydnssec=1
- uci commit
+ uci commit && reload_config
#### DNSSEC by dnsmasq
uci set dhcp.@dnsmasq[-1].dnssec=1
uci set dhcp.@dnsmasq[-1].dnsseccheckunsigned=1
- uci commit
+ uci commit && reload_config
The same options can be set in the LUCI web interface as follows: