Auto-update blog content from Obsidian: 2025-05-19 18:47:38
All checks were successful
Deploy / Deploy (push) Successful in 4s

This commit is contained in:
Gitea Actions 2025-05-19 18:47:38 +00:00
parent cf3981ca2d
commit 74048b4d75

View File

@ -159,10 +159,8 @@ Each VLAN has its own DHCP pool managed by OPNsense, excepted the Heartbeat and
#### DNS #### DNS
DNS is structured in two layers within OPNsense: DNS is structured in two layers within OPNsense:
- ADguard Home (Port 53): filters ads and trackers, serves every client on the network
- **Level 1 (Port 53):** ADguard Home filters ads and trackers, reducing network noise and providing a cleaner browsing experience. - Unbound DNS (Port 5353): acts as recursive DNS, serves only locally the ADguard Home service
- **Level 2 (Port 5353):** ADguard forwards requests to **Unbound**, which caches queries and uses **DNS over TLS (DoT)** for encrypted external lookups.
This setup balances privacy, performance, and control over DNS traffic. This setup balances privacy, performance, and control over DNS traffic.