Skip to main content DNS over TLS implementation guide for OpenWrt routers : r/openwrt
Go to openwrt
•

DNS over TLS implementation guide for OpenWrt routers

Check out my DNS over TLS implementation guide for OpenWrt routers:
https://medium.com/@harriebird/implement-dns-over-tls-on-openwrt-20b7026a9b6c

Calling all experts and enthusiasts! Time is money, and with Squarespace, you can make even *more* when you offer your services with its all-in-one Commerce tools. So turn your practice into profit and your expertise into income.
Sign Up
squarespace.com
Thumbnail image: Calling all experts and enthusiasts! Time is money, and with Squarespace, you can make even *more* when you offer your services with its all-in-one Commerce tools. So turn your practice into profit and your expertise into income.
Sort by:
Best
Open comment sort options
•

Thank you. This is the guide I need. I'm a noob and don't know anything about networking but your guide is easy to follow.

•

You're welcome!

More replies
•

Dope. Thanks!

•

You're welcome!

More replies
•

nice

I'd probably also want to block forwarding of udp/tcp on port 53 on the router, so no plain dns traffic escapes inadvertently.

[deleted]
•

Yeah I have anything internal on 53 get redirected to the local dnsmask. The only things you will miss are things like Google devices using DNS-over-https but you can also just block anything going out to 8.8.8.8 ect

More replies
•

I wrote an article a few years ago for enabling DNS over TLS: https://candrews.integralblue.com/2018/08/dns-over-tls-on-openwrt-18-06/

My post is more focused on using commands to accomplish this task as opposed to the luci interface.

I also wrote an article on how to enable DNSSEC: https://candrews.integralblue.com/2018/08/dnssec-on-openwrt-18-06/ Someday I hope OpenWRT will enable DNSSEC by default.

For the highest level of security, enable both DNSSEC and DNS over TLS.