Hi guys

I setup Pihole + unbound + PiVPN. Could I setup unbound as DoH server?

  • BlackEco@lemmy.blackeco.com
    link
    fedilink
    English
    arrow-up
    3
    arrow-down
    1
    ·
    edit-2
    1 year ago

    Not sure what you mean by setting unbound as a DoH server. You mean to query unbound through DoH? Wouldn’t you prefer to query you PiHole instead (which will query unbound)?

    Anyway, the best way to do this is using Adguard’s dnsproxy: it proxies calls to any DNS server. (self plug: I made a Docker container for dnsproxy)

      • BlackEco@lemmy.blackeco.com
        link
        fedilink
        English
        arrow-up
        1
        ·
        1 year ago

        Unless your ISP does Deep Packet Inspection (DPI), your ISP should not be able to see your DNS queries since you won’t be querying their DNS server anymore, but the authoritative servers. Maybe you can protect yourself from DPI by setting up unbound to query the authoritative servers using DoT or DoH (though I don’t know how).

        As for MIM attacks, I don’t have enough knowledge to answer.