net/stubby/files/stubby.conf

   1 config stubby 'global'
   2        option manual '0'
   3        option trigger 'wan'
   4        # option triggerdelay '2'
   5        list dns_transport 'GETDNS_TRANSPORT_TLS'
   6        option tls_authentication '1'
   7        option tls_query_padding_blocksize '128'
   8        # option tls_connection_retries '2'
   9        # option tls_backoff_time '3600'
  10        # option timeout '5000'
  11        # option dnssec_return_status '0'
  12        option appdata_dir '/var/lib/stubby'
  13        # option dnssec_trust_anchors '/var/lib/stubby/getdns-root.key'
  14        option edns_client_subnet_private '1'
  15        option idle_timeout '10000'
  16        option round_robin_upstreams '1'
  17        list listen_address '127.0.0.1@5453'
  18        list listen_address '0::1@5453'
  19        # option log_level '7'
  20        # option command_line_arguments ''
  21
  22 # Upstream resolvers are specified using 'resolver' sections.
  23 config resolver
  24        option address '2606:4700:4700::1111'
  25        option tls_auth_name 'cloudflare-dns.com'
  26        # list spki 'sha256/yioEpqeR4WtDwE9YxNVnCEkTxIjx6EEIwFSQW+lJsbc='
  27
  28 config resolver
  29        option address '2606:4700:4700::1001'
  30        option tls_auth_name 'cloudflare-dns.com'
  31        # list spki 'sha256/yioEpqeR4WtDwE9YxNVnCEkTxIjx6EEIwFSQW+lJsbc='
  32
  33 config resolver
  34        option address '1.1.1.1'
  35        option tls_auth_name 'cloudflare-dns.com'
  36        # list spki 'sha256/yioEpqeR4WtDwE9YxNVnCEkTxIjx6EEIwFSQW+lJsbc='
  37
  38 config resolver
  39        option address '1.0.0.1'
  40        option tls_auth_name 'cloudflare-dns.com'
  41        # list spki 'sha256/yioEpqeR4WtDwE9YxNVnCEkTxIjx6EEIwFSQW+lJsbc='