Config.in 1.1 KB

1234567891011121314151617181920212223242526272829303132333435363738
  1. config BR2_PACKAGE_UNBOUND
  2. bool "unbound"
  3. depends on !BR2_STATIC_LIBS
  4. select BR2_PACKAGE_EXPAT
  5. select BR2_PACKAGE_LIBEVENT
  6. select BR2_PACKAGE_OPENSSL
  7. help
  8. Unbound is a validating, recursive, and caching DNS resolver.
  9. It supports DNSSEC, QNAME minimisation, DNS-over-TLS and
  10. DNSCrypt.
  11. https://www.unbound.net
  12. if BR2_PACKAGE_UNBOUND
  13. config BR2_PACKAGE_UNBOUND_DNSCRYPT
  14. bool "enable DNSCrypt"
  15. select BR2_PACKAGE_LIBSODIUM
  16. help
  17. DNSCrypt wraps unmodified DNS queries between a client and
  18. a DNS resolver. Default port used is 443 and like with
  19. normal unencrypted DNS, it uses UDP first and falling back
  20. to TCP if response too large.
  21. There is also DNS-over-TLS, a TCP only version
  22. of proposed standard for DNS encryption (RFC 7858).
  23. Default port for DNS-over-TLS is 853 and Unbound has
  24. built-in support for it.
  25. https://tools.ietf.org/html/rfc7858
  26. Note: Neither DNSCrypt or DNS-over-TLS encrypt the SNI.
  27. Here is some suggestions how to handle SNI encryption:
  28. https://tools.ietf.org/html/draft-ietf-tls-sni-encryption-00
  29. endif
  30. comment "unbound needs a toolchain w/ dynamic library"
  31. depends on BR2_STATIC_LIBS