nixos/dnscrypt-proxy docs: reword section on forwarding
Newer versions of DNSCrypt proxy *can* cache lookups (via plugin); make the wording more neutral wrt. why one might want to run the proxy in a forwarding setup.
This commit is contained in:
parent
c0a8a9205b
commit
5279ec111f
@ -31,15 +31,12 @@
|
|||||||
|
|
||||||
</sect1>
|
</sect1>
|
||||||
|
|
||||||
<sect1><title>As a forwarder for a caching DNS client</title>
|
<sect1><title>As a forwarder for another DNS client</title>
|
||||||
|
|
||||||
<para>
|
<para>
|
||||||
By default, DNSCrypt proxy acts as a transparent proxy for the
|
To run the DNSCrypt proxy client as a forwarder for another
|
||||||
system stub resolver. Because the client does not cache lookups, this
|
DNS client, change the default proxy listening port to a
|
||||||
setup can significantly slow down e.g., web browsing. The recommended
|
non-standard value and point the other client to it:
|
||||||
configuration is to run DNSCrypt proxy as a forwarder for a caching DNS
|
|
||||||
client. To achieve this, change the default proxy listening port to
|
|
||||||
a non-standard value and point the caching client to it:
|
|
||||||
<programlisting>
|
<programlisting>
|
||||||
services.dnscrypt-proxy.localPort = 43;
|
services.dnscrypt-proxy.localPort = 43;
|
||||||
</programlisting>
|
</programlisting>
|
||||||
@ -60,7 +57,6 @@
|
|||||||
<para>
|
<para>
|
||||||
<programlisting>
|
<programlisting>
|
||||||
{
|
{
|
||||||
networking.nameservers = [ "127.0.0.1" ];
|
|
||||||
services.unbound.enable = true;
|
services.unbound.enable = true;
|
||||||
services.unbound.forwardAddresses = [ "127.0.0.1@43" ];
|
services.unbound.forwardAddresses = [ "127.0.0.1@43" ];
|
||||||
}
|
}
|
||||||
|
Loading…
x
Reference in New Issue
Block a user