diff --git a/etc/unbound/unbound.conf.d/dns-over-tls.conf b/etc/unbound/unbound.conf.d/dns-over-tls.conf index a9ad5eed..2ed648b0 100644 --- a/etc/unbound/unbound.conf.d/dns-over-tls.conf +++ b/etc/unbound/unbound.conf.d/dns-over-tls.conf @@ -9,11 +9,16 @@ server: # https://docs.quad9.net/Quad9_For_Organizations/DNS_Forwarder_Best_Practices/#disable-qname-minimization qname-minimisation: no -# This list is for my travel laptop to have at least one DoT443 server -# which seems to be applied-privacy.net. They advice having multiple DoT servers -# for redundancy and as they don't filter, it's best I use other non-filtering ones. -# Since then this expanded to include . -# just look at git blame... +# This file keeps changing purpose between being just for my travel laptop +# and sometimes helps when I cannot decide what is important in a DNS server. + +# - applied-privacy.net provides DoT over 443 and tells you to use multiple +# servers for redundancy. +# - cloudflare-dns.com contributes to https://radar.cloudflare.com which gets +# used by many others including PrivacyBadger most popular domains for its +# badgersett pretraining +# - dns0.eu provides servers located only in the EU and private ECS +# - adguard-dns.com provides private ECS around the world forward-zone: name: "." @@ -32,24 +37,24 @@ forward-zone: forward-addr: 1.0.0.1@853#cloudflare-dns.com # Mullvad unfiltered, Anycast Sweden, no ECS - forward-addr: 194.242.2.2@853#dns.mullvad.net - forward-addr: 2a07:e340::2@853#dns.mullvad.net + #forward-addr: 194.242.2.2@853#dns.mullvad.net + #forward-addr: 2a07:e340::2@853#dns.mullvad.net # Control D Free DNS unfilterd, anycast, no ECS - forward-addr: 76.76.2.0@853#p0.freedns.controld.com - forward-addr: 2606:1a40::@853#s0.freedns.controld.com - forward-addr: 76.76.10.0@853#p0.freedns.controld.com - forward-addr: 2606:1a40:1::@853#s0.freedns.controld.com + #forward-addr: 76.76.2.0@853#p0.freedns.controld.com + #forward-addr: 2606:1a40::@853#s0.freedns.controld.com + #forward-addr: 76.76.10.0@853#p0.freedns.controld.com + #forward-addr: 2606:1a40:1::@853#s0.freedns.controld.com # Quad9 unfiltered, anycast, no ECS, no DNSSEC (Unbound does that) - forward-addr: 2620:fe::fe:10@853#dns10.quad9.net - forward-addr: 2620:fe::fe:10@8853#dns10.quad9.net - forward-addr: 149.112.112.10@853#dns10.quad9.net - forward-addr: 149.112.112.10@8853#dns10.quad9.net - forward-addr: 2620:fe::10@853#dns10.quad9.net - forward-addr: 2620:fe::10@8853#dns10.quad9.net - forward-addr: 9.9.9.10@853#dns10.quad9.net - forward-addr: 9.9.9.10@8853#dns10.quad9.net + #forward-addr: 2620:fe::fe:10@853#dns10.quad9.net + #forward-addr: 2620:fe::fe:10@8853#dns10.quad9.net + #forward-addr: 149.112.112.10@853#dns10.quad9.net + #forward-addr: 149.112.112.10@8853#dns10.quad9.net + #forward-addr: 2620:fe::10@853#dns10.quad9.net + #forward-addr: 2620:fe::10@8853#dns10.quad9.net + #forward-addr: 9.9.9.10@853#dns10.quad9.net + #forward-addr: 9.9.9.10@8853#dns10.quad9.net # https://www.dns0.eu/open https://www.dns0.eu/network - French based. Private ECS forward-addr: 193.110.81.254@853#open.dns0.eu