···

       
31
       
31
       
 
       


     

       
32
       
32
       
 
       
  </sect1>

     

       
33
       
33
       
 
       


     

       
34
       
34
       
-
       
  <sect1><title>As a forwarder for a caching DNS client</title>

     

       
34
       
34
       
+
       
  <sect1><title>As a forwarder for another DNS client</title>

     

       
35
       
35
       
 
       


     

       
36
       
36
       
 
       
  <para>

     

       
37
       
37
       
-
       
    By default, DNSCrypt proxy acts as a transparent proxy for the

     

       
38
       
38
       
-
       
    system stub resolver. Because the client does not cache lookups, this

     

       
39
       
39
       
-
       
    setup can significantly slow down e.g., web browsing. The recommended

     

       
40
       
40
       
-
       
    configuration is to run DNSCrypt proxy as a forwarder for a caching DNS

     

       
41
       
41
       
-
       
    client. To achieve this, change the default proxy listening port to

     

       
42
       
42
       
-
       
    a non-standard value and point the caching client to it:

     

       
37
       
37
       
+
       
    To run the DNSCrypt proxy client as a forwarder for another

     

       
38
       
38
       
+
       
    DNS client, change the default proxy listening port to a

     

       
39
       
39
       
+
       
    non-standard value and point the other client to it:

     

       
43
       
40
       
 
       
    <programlisting>

     

       
44
       
41
       
 
       
      services.dnscrypt-proxy.localPort = 43;

     

       
45
       
42
       
 
       
    </programlisting>

     
···

       
60
       
57
       
 
       
  <para>

     

       
61
       
58
       
 
       
    <programlisting>

     

       
62
       
59
       
 
       
      {

     

       
63
       
63
       
-
       
        networking.nameservers = [ "127.0.0.1" ];

     

       
64
       
60
       
 
       
        services.unbound.enable = true;

     

       
65
       
61
       
 
       
        services.unbound.forwardAddresses = [ "127.0.0.1@43" ];

     

       
66
       
62
       
 
       
      }