From 5279ec111fef20a04155537ec19d8f5b36a4d50e Mon Sep 17 00:00:00 2001 From: Joachim Fasting Date: Thu, 9 Mar 2017 20:32:03 +0100 Subject: [PATCH] nixos/dnscrypt-proxy docs: reword section on forwarding Newer versions of DNSCrypt proxy *can* cache lookups (via plugin); make the wording more neutral wrt. why one might want to run the proxy in a forwarding setup. --- nixos/modules/services/networking/dnscrypt-proxy.xml | 12 ++++-------- 1 file changed, 4 insertions(+), 8 deletions(-) diff --git a/nixos/modules/services/networking/dnscrypt-proxy.xml b/nixos/modules/services/networking/dnscrypt-proxy.xml index 982961833ad2..555c6df4d551 100644 --- a/nixos/modules/services/networking/dnscrypt-proxy.xml +++ b/nixos/modules/services/networking/dnscrypt-proxy.xml @@ -31,15 +31,12 @@ - As a forwarder for a caching DNS client + As a forwarder for another DNS client - By default, DNSCrypt proxy acts as a transparent proxy for the - system stub resolver. Because the client does not cache lookups, this - setup can significantly slow down e.g., web browsing. The recommended - configuration is to run DNSCrypt proxy as a forwarder for a caching DNS - client. To achieve this, change the default proxy listening port to - a non-standard value and point the caching client to it: + To run the DNSCrypt proxy client as a forwarder for another + DNS client, change the default proxy listening port to a + non-standard value and point the other client to it: services.dnscrypt-proxy.localPort = 43; @@ -60,7 +57,6 @@ { - networking.nameservers = [ "127.0.0.1" ]; services.unbound.enable = true; services.unbound.forwardAddresses = [ "127.0.0.1@43" ]; }