| config stubby 'global' |
| option manual '0' |
| option trigger 'wan' |
| # option triggerdelay '2' |
| list dns_transport 'GETDNS_TRANSPORT_TLS' |
| option tls_authentication '1' |
| option tls_query_padding_blocksize '128' |
| # option tls_connection_retries '2' |
| # option tls_backoff_time '3600' |
| # option timeout '5000' |
| # option dnssec_return_status '0' |
| option appdata_dir '/var/lib/stubby' |
| # option trust_anchors_backoff_time 2500 |
| # option dnssec_trust_anchors '/var/lib/stubby/getdns-root.key' |
| option edns_client_subnet_private '1' |
| option idle_timeout '10000' |
| option round_robin_upstreams '1' |
| list listen_address '127.0.0.1@5453' |
| list listen_address '0::1@5453' |
| # option log_level '7' |
| # option command_line_arguments '' |
| # option tls_cipher_list 'EECDH+AESGCM:EECDH+CHACHA20' |
| # option tls_ciphersuites 'TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256' |
| # option tls_min_version '1.2' |
| # option tls_max_version '1.3' |
| |
| # Upstream resolvers are specified using 'resolver' sections. |
| config resolver |
| option address '2606:4700:4700::1111' |
| option tls_auth_name 'cloudflare-dns.com' |
| # option tls_port 853 |
| # list spki 'sha256/yioEpqeR4WtDwE9YxNVnCEkTxIjx6EEIwFSQW+lJsbc=' |
| # option tls_cipher_list 'EECDH+AESGCM:EECDH+CHACHA20' |
| # option tls_ciphersuites 'TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256' |
| # option tls_min_version '1.2' |
| # option tls_max_version '1.3' |
| |
| config resolver |
| option address '2606:4700:4700::1001' |
| option tls_auth_name 'cloudflare-dns.com' |
| # option tls_port 853 |
| # list spki 'sha256/yioEpqeR4WtDwE9YxNVnCEkTxIjx6EEIwFSQW+lJsbc=' |
| # option tls_cipher_list 'EECDH+AESGCM:EECDH+CHACHA20' |
| # option tls_ciphersuites 'TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256' |
| # option tls_min_version '1.2' |
| # option tls_max_version '1.3' |
| |
| config resolver |
| option address '1.1.1.1' |
| option tls_auth_name 'cloudflare-dns.com' |
| # option tls_port 853 |
| # list spki 'sha256/yioEpqeR4WtDwE9YxNVnCEkTxIjx6EEIwFSQW+lJsbc=' |
| # option tls_cipher_list 'EECDH+AESGCM:EECDH+CHACHA20' |
| # option tls_ciphersuites 'TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256' |
| # option tls_min_version '1.2' |
| # option tls_max_version '1.3' |
| |
| config resolver |
| option address '1.0.0.1' |
| option tls_auth_name 'cloudflare-dns.com' |
| # option tls_port 853 |
| # list spki 'sha256/yioEpqeR4WtDwE9YxNVnCEkTxIjx6EEIwFSQW+lJsbc=' |
| # option tls_cipher_list 'EECDH+AESGCM:EECDH+CHACHA20' |
| # option tls_ciphersuites 'TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256' |
| # option tls_min_version '1.2' |
| # option tls_max_version '1.3' |