diff options
| author | Joachim Fasting <joachifm@fastmail.fm> | 2017-03-09 20:32:03 +0100 |
|---|---|---|
| committer | Joachim Fasting <joachifm@fastmail.fm> | 2017-03-10 18:54:52 +0100 |
| commit | 5279ec111fef20a04155537ec19d8f5b36a4d50e (patch) | |
| tree | c76e08c6874c9ecd491c25595d72674b6c14e9de /nixos/modules/services/networking/dnscrypt-proxy.xml | |
| parent | c0a8a9205b590828c2a174f751c80908e632f734 (diff) | |
nixos/dnscrypt-proxy docs: reword section on forwarding
Newer versions of DNSCrypt proxy *can* cache lookups (via
plugin); make the wording more neutral wrt. why one might want
to run the proxy in a forwarding setup.
Diffstat (limited to 'nixos/modules/services/networking/dnscrypt-proxy.xml')
| -rw-r--r-- | nixos/modules/services/networking/dnscrypt-proxy.xml | 12 |
1 files changed, 4 insertions, 8 deletions
diff --git a/nixos/modules/services/networking/dnscrypt-proxy.xml b/nixos/modules/services/networking/dnscrypt-proxy.xml index 982961833ad2..555c6df4d551 100644 --- a/nixos/modules/services/networking/dnscrypt-proxy.xml +++ b/nixos/modules/services/networking/dnscrypt-proxy.xml @@ -31,15 +31,12 @@ </sect1> - <sect1><title>As a forwarder for a caching DNS client</title> + <sect1><title>As a forwarder for another DNS client</title> <para> - By default, DNSCrypt proxy acts as a transparent proxy for the - system stub resolver. Because the client does not cache lookups, this - setup can significantly slow down e.g., web browsing. The recommended - configuration is to run DNSCrypt proxy as a forwarder for a caching DNS - client. To achieve this, change the default proxy listening port to - a non-standard value and point the caching client to it: + To run the DNSCrypt proxy client as a forwarder for another + DNS client, change the default proxy listening port to a + non-standard value and point the other client to it: <programlisting> services.dnscrypt-proxy.localPort = 43; </programlisting> @@ -60,7 +57,6 @@ <para> <programlisting> { - networking.nameservers = [ "127.0.0.1" ]; services.unbound.enable = true; services.unbound.forwardAddresses = [ "127.0.0.1@43" ]; } |