RUTX11 DNS

Wiki mirrorView source
The information in this page is updated in accordance with firmware version RUTX_R_00.07.22.1.

Summary

The DNS page is used to to set up how the device utilizes its own and other DNS servers.
This manual page provides an overview of the DNS windows in RUTX11 devices.

General Settings

The General Settings section is used to set up the main DNS parameters. Refer to the table below for information on each configuration field.
FieldValueDescription
Inherited DNS serversInherited server listDNS Servers that were inherited from WAN interfaces.
DNS serversIP address (ip); default: noneList of DNS servers to forward requests to. See the dnsmasq -S option man page for syntax details. Specify servers to complement inherited ones.
Static addressesHostname (domain name) | IP address (ip); default: noneList of IP addresses for queried domains. See the dnsmasq -A option man page for syntax details.
Rebind protectionoff | on; default: onDiscards upstream RFC1918 responses. When enabled, the device will not resolve domain names for internal hosts.

Advanced Settings

The Advanced Settings section is used to set up some of the more specific DNS parameters. Refer to the table below for information on each configuration field.
FieldValueDescription
Custom redirectDomain - Domain names are accepted (e.g., example.com). Wildcard symbol (*) at the start can also be used (e.g., *.example.com) | DNS Server - IP address (ip); default: noneSpecify server for a domain. This is intended for private nameservers.
Listen Interfacesnetwork interface(s); default: noneLimit DHCP and DNS requests listening to these interfaces, and loopback. Leave empty to listen on all interfaces.
Exclude Interfacesnetwork interface(s); default: nonePrevent DHCP and DNS requests listening on these interfaces. Leave empty to listen on all interfaces.
DNS strict orderoff | on; default: onObeys the order of listed DNS servers.
Local Service Onlyoff | on; default: offLimit DNS service to subnets interfaces on which we are serving DNS.
Log queriesoff | on; default: offWrite received DNS requests to syslog.
Filter privateoff | on; default: onDo not forward reverse lookups for local networks.
Localise queriesoff | on; default: onLocalise hostname depending on the requesting subnet if multiple IPs are available.
Additional servers filetext file; default: noneUploads an additional DNS servers file. This file may contain lines like 'server=/domain/1.2.3.4' or 'server=1.2.3.4' for domain-specific or full upstream DNS servers.
Size of DNS query cacheinteger [0..10000]; default: noneNumber of cached DNS entries (max is 10000, 0 is no caching).

HTTPS DNS Proxy

Light-weight DNS-over-HTTPS, non-caching translation proxy for the RFC 8484 DoH standard. It receives regular (UDP) DNS requests and resolves them via DoH resolver.
Note: IGMP Proxy is additional software that can be installed from the System → Package Manager page.

HTTPS DNS proxy configuration

The HTTPS DNS proxy configuration section is used to enable the service. Refer to the table below for information on each configuration field.
FieldValueDescription
Enableoff | on; default: offEnables HTTPS DNS proxy configuration.

DNS over HTTPS resolvers

The DNS over HTTPS resolvers section is used to set up some of the more specific DNS parameters. Refer to the table below for information on each configuration field.
FieldValueDescription
PresetCustom | Google | CloudFlare; default: CloudFlarePresets for popular DNS over HTTPS resolvers. Use "Custom" to set your resolver.
Bootsrap DNSIPv4/IPv6 address; default: depends on the service providerThis DNS is used for the initial "Resolver URL" resolve.
Resolver URLurl; default: depends on the service providerResolver URL.
Portinteger [1..65535]; default: depends on the service providerInternal port used for this resolver. Change only if it collides with existing ports on this device.
Actions-interactive button; default: DeleteDeletes the preset.
Note: If more than one resolver is specified then the first is used as the main one and others are used as failovers.