LILiK
/
openwrt-packages-dist
5
0
Fork 0
Code Issues 0 Pull Requests 0 Projects 0 Releases 0 Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
18447 Commits
1 Branch
46 MiB
Tree: 6721587e8b
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from '6721587e8b'
${ noResults }
openwrt-packages-dist/net/stubby/files/stubby.conf

66 lines
2.9 KiB
Raw Normal View History

stubby: add uci support to init file This commit brings UCI support to the stubby package. o All options are documented in the README.md file. o The README.md file has been re-written to include a short usage manual. o The default configuration now includes more Cloudflare addresses. o The stubby service is (re)started using procd triggers from a specified interface with a configurable time delay. o Round robin use of upstream resolvers is now activated by default. o Client privacy is now activated by default. o Options are added for specifying the log level of the daemon and command line options passed to the stubby command. Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
6 years ago
​
​
​
​
​
​
​
​
​
​
​
stubby: update to version 0.2.4 This upstream release adds support for trust_anchors_backoff_time configuration parameter. UCI support has been added for this. This commit also includes a number of clean-ups: o change START=50 to START=30 in init file Starting earlier in the boot means less chance of missing interface trigger events. See: https://github.com/openwrt/packages/pull/4675 o remove unused variables from init file o separate local declarations and assignments in init file o add defensive quoting in init file o use default values for procd respawn in init file o make use of {} in variables consistent in init file o remove unused variable from init file Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
6 years ago
stubby: add uci support to init file This commit brings UCI support to the stubby package. o All options are documented in the README.md file. o The README.md file has been re-written to include a short usage manual. o The default configuration now includes more Cloudflare addresses. o The stubby service is (re)started using procd triggers from a specified interface with a configurable time delay. o Round robin use of upstream resolvers is now activated by default. o Client privacy is now activated by default. o Options are added for specifying the log level of the daemon and command line options passed to the stubby command. Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
6 years ago
​
​
​
​
​
​
​
stubby: add support for TLS configuration options - tls_cipher_list - tls_ciphersuites - tls_min_version - tls_max_version Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
6 years ago
​
​
​
stubby: add uci support to init file This commit brings UCI support to the stubby package. o All options are documented in the README.md file. o The README.md file has been re-written to include a short usage manual. o The default configuration now includes more Cloudflare addresses. o The stubby service is (re)started using procd triggers from a specified interface with a configurable time delay. o Round robin use of upstream resolvers is now activated by default. o Client privacy is now activated by default. o Options are added for specifying the log level of the daemon and command line options passed to the stubby command. Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
6 years ago
​
​
​
​
stubby: add support for tls_port resolver config option (#8889) Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
6 years ago
stubby: add uci support to init file This commit brings UCI support to the stubby package. o All options are documented in the README.md file. o The README.md file has been re-written to include a short usage manual. o The default configuration now includes more Cloudflare addresses. o The stubby service is (re)started using procd triggers from a specified interface with a configurable time delay. o Round robin use of upstream resolvers is now activated by default. o Client privacy is now activated by default. o Options are added for specifying the log level of the daemon and command line options passed to the stubby command. Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
6 years ago
stubby: add support for TLS configuration options - tls_cipher_list - tls_ciphersuites - tls_min_version - tls_max_version Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
6 years ago
​
​
​
stubby: add uci support to init file This commit brings UCI support to the stubby package. o All options are documented in the README.md file. o The README.md file has been re-written to include a short usage manual. o The default configuration now includes more Cloudflare addresses. o The stubby service is (re)started using procd triggers from a specified interface with a configurable time delay. o Round robin use of upstream resolvers is now activated by default. o Client privacy is now activated by default. o Options are added for specifying the log level of the daemon and command line options passed to the stubby command. Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
6 years ago
​
​
​
stubby: add support for tls_port resolver config option (#8889) Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
6 years ago
stubby: add uci support to init file This commit brings UCI support to the stubby package. o All options are documented in the README.md file. o The README.md file has been re-written to include a short usage manual. o The default configuration now includes more Cloudflare addresses. o The stubby service is (re)started using procd triggers from a specified interface with a configurable time delay. o Round robin use of upstream resolvers is now activated by default. o Client privacy is now activated by default. o Options are added for specifying the log level of the daemon and command line options passed to the stubby command. Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
6 years ago
stubby: add support for TLS configuration options - tls_cipher_list - tls_ciphersuites - tls_min_version - tls_max_version Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
6 years ago
​
​
​
stubby: add uci support to init file This commit brings UCI support to the stubby package. o All options are documented in the README.md file. o The README.md file has been re-written to include a short usage manual. o The default configuration now includes more Cloudflare addresses. o The stubby service is (re)started using procd triggers from a specified interface with a configurable time delay. o Round robin use of upstream resolvers is now activated by default. o Client privacy is now activated by default. o Options are added for specifying the log level of the daemon and command line options passed to the stubby command. Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
6 years ago
​
​
​
stubby: add support for tls_port resolver config option (#8889) Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
6 years ago
stubby: add uci support to init file This commit brings UCI support to the stubby package. o All options are documented in the README.md file. o The README.md file has been re-written to include a short usage manual. o The default configuration now includes more Cloudflare addresses. o The stubby service is (re)started using procd triggers from a specified interface with a configurable time delay. o Round robin use of upstream resolvers is now activated by default. o Client privacy is now activated by default. o Options are added for specifying the log level of the daemon and command line options passed to the stubby command. Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
6 years ago
stubby: add support for TLS configuration options - tls_cipher_list - tls_ciphersuites - tls_min_version - tls_max_version Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
6 years ago
​
​
​
stubby: add uci support to init file This commit brings UCI support to the stubby package. o All options are documented in the README.md file. o The README.md file has been re-written to include a short usage manual. o The default configuration now includes more Cloudflare addresses. o The stubby service is (re)started using procd triggers from a specified interface with a configurable time delay. o Round robin use of upstream resolvers is now activated by default. o Client privacy is now activated by default. o Options are added for specifying the log level of the daemon and command line options passed to the stubby command. Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
6 years ago
​
​
​
stubby: add support for tls_port resolver config option (#8889) Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
6 years ago
stubby: add uci support to init file This commit brings UCI support to the stubby package. o All options are documented in the README.md file. o The README.md file has been re-written to include a short usage manual. o The default configuration now includes more Cloudflare addresses. o The stubby service is (re)started using procd triggers from a specified interface with a configurable time delay. o Round robin use of upstream resolvers is now activated by default. o Client privacy is now activated by default. o Options are added for specifying the log level of the daemon and command line options passed to the stubby command. Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
6 years ago
stubby: add support for TLS configuration options - tls_cipher_list - tls_ciphersuites - tls_min_version - tls_max_version Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
6 years ago
​
​
​
 
  1. config stubby 'global'
  2.        option manual '0'
  3.        option trigger 'wan'
  4.        # option triggerdelay '2'
  5.        list dns_transport 'GETDNS_TRANSPORT_TLS'
  6.        option tls_authentication '1'
  7.        option tls_query_padding_blocksize '128'
  8.        # option tls_connection_retries '2'
  9.        # option tls_backoff_time '3600'
  10.        # option timeout '5000'
  11.        # option dnssec_return_status '0'
  12.        option appdata_dir '/var/lib/stubby'
  13.        # option trust_anchors_backoff_time 2500
  14.        # option dnssec_trust_anchors '/var/lib/stubby/getdns-root.key'
  15.        option edns_client_subnet_private '1'
  16.        option idle_timeout '10000'
  17.        option round_robin_upstreams '1'
  18.        list listen_address '127.0.0.1@5453'
  19.        list listen_address '0::1@5453'
  20.        # option log_level '7'
  21.        # option command_line_arguments ''
  22.        # option tls_cipher_list 'EECDH+AESGCM:EECDH+CHACHA20'
  23.        # option tls_ciphersuites 'TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256'
  24.        # option tls_min_version '1.2'
  25.        # option tls_max_version '1.3'
  26. 

  27. # Upstream resolvers are specified using 'resolver' sections.
  28. config resolver
  29.        option address '2606:4700:4700::1111'
  30.        option tls_auth_name 'cloudflare-dns.com'
  31.        # option tls_port 853
  32.        # list spki 'sha256/yioEpqeR4WtDwE9YxNVnCEkTxIjx6EEIwFSQW+lJsbc='
  33.        # option tls_cipher_list 'EECDH+AESGCM:EECDH+CHACHA20'
  34.        # option tls_ciphersuites 'TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256'
  35.        # option tls_min_version '1.2'
  36.        # option tls_max_version '1.3'
  37. 

  38. config resolver
  39.        option address '2606:4700:4700::1001'
  40.        option tls_auth_name 'cloudflare-dns.com'
  41.        # option tls_port 853
  42.        # list spki 'sha256/yioEpqeR4WtDwE9YxNVnCEkTxIjx6EEIwFSQW+lJsbc='
  43.        # option tls_cipher_list 'EECDH+AESGCM:EECDH+CHACHA20'
  44.        # option tls_ciphersuites 'TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256'
  45.        # option tls_min_version '1.2'
  46.        # option tls_max_version '1.3'
  47. 

  48. config resolver
  49.        option address '1.1.1.1'
  50.        option tls_auth_name 'cloudflare-dns.com'
  51.        # option tls_port 853
  52.        # list spki 'sha256/yioEpqeR4WtDwE9YxNVnCEkTxIjx6EEIwFSQW+lJsbc='
  53.        # option tls_cipher_list 'EECDH+AESGCM:EECDH+CHACHA20'
  54.        # option tls_ciphersuites 'TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256'
  55.        # option tls_min_version '1.2'
  56.        # option tls_max_version '1.3'
  57. 

  58. config resolver
  59.        option address '1.0.0.1'
  60.        option tls_auth_name 'cloudflare-dns.com'
  61.        # option tls_port 853
  62.        # list spki 'sha256/yioEpqeR4WtDwE9YxNVnCEkTxIjx6EEIwFSQW+lJsbc='
  63.        # option tls_cipher_list 'EECDH+AESGCM:EECDH+CHACHA20'
  64.        # option tls_ciphersuites 'TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256'
  65.        # option tls_min_version '1.2'
  66.        # option tls_max_version '1.3'