DNScrypt DNScrypt vs Stubby Help

  • ATTENTION! You'll notice a Prefix dropdown when you create a thread. If your post applies to one of the topics listed, please use that Prefix for your post. When browsing the thread list you can use the Prefix to filter the view.
  • ATTENTION! As of November 1, 2020, you are not able to reply to threads 6 months after the thread is opened if there are more than 500 posts in the thread.
    Threads will not be locked, so posts may still be edited by their authors.
    Just start a new thread on the topic to post if you get an error message when trying to reply to a thread.

Sean Rhodes

Regular Contributor
I'm not sure if i'm in the right thread, but can someone advise whether stubby or dnscrypt is better, or if either would interfere with my current setup?
Code:
 amtm 3.1.8 FW             by thelonelycoder
 RT-AC3200 (armv7l) FW-384.13 @ 10.0.1.1
    The Asuswrt-Merlin Terminal Menu         

 1  open     Diversion                v4.1.12
 2  open     Skynet                    v7.2.3
 3  open     FlexQoS                   v1.0.6

 5  open     scribe                    v2.4.3
 6  open     x3mRouting    v2.0.0   -> v2.4.0

 7  open     unbound Manager            v3.21
 8  open     nsrum                    v30.4.0

 j1 open     connmon                   v2.8.1
 j2 open     ntpMerlin                 v3.0.0
 j3 open     scMerlin      v2.0.1   <- v2.0.0

 j4 open     spdMerlin                 v4.1.1
 j5 open     uiDivStats                v2.2.2
 j6 open     uiScribe                  v1.4.0

 ep manage   Entware packages

 dc manage   Disk check script   dcl show log
 rs manage   Reboot scheduler Wed @ 4:15
 sw manage   Swap file /mnt/asus_usb 2.0G

 i  show     all available scripts or tools
 u  check    for script updates

    amtm options
 e  exit      t  theme   r  reset   a  about
_____________________________________________
 

L&LD

Part of the Furniture
You're using Unbound Manager already.

Better for what?
 

Sean Rhodes

Regular Contributor
My understanding was that they both encrypt the DNS, but I don't know which is better, or whether there are any incompatibilities with what I have currently installed, or whether they are redundant in my current configuration
 

Zastoff

Very Senior Member
Looks like you use unbound_manager and from what I've read about it, Is fast and have security in focus, it is not encrypted but have ways to make it harder to detect.(Running your own dns server)

The in gui (WAN DoT stubby) is encrypted

Dnscrypt-proxy v2 offers Dnscrypt protocol servers and DoH protocol servers, Also encrypted.

The encrypted options have about the same level of security, Comes down to what servers you trust.
And note the encrypted options does not fully hide/secure your dns traffic.
I prefer Dnscrypt v2 protocol with DNSSec enabled servers.
(Was made for DNS, open source and complete specification since 2013)

edit:
Unbound_manager, In Gui DoT and DNSCrypt-proxy do not work together.
Recommend to read up on the differens between them and test what you like best.
Unbound_manager
DoT(stubby)
DNSCrypt-proxy
 
Last edited:

Sean Rhodes

Regular Contributor
Looks like you use unbound_manager and from what I've read about it, Is fast and have security in focus, it is not encrypted but have ways to make it harder to detect.(Running your own dns server)

The in gui (WAN DoT stubby) is encrypted

Dnscrypt-proxy v2 offers Dnscrypt protocol servers and DoH protocol servers, Also encrypted.

The encrypted options have about the same level of security, Comes down to what servers you trust.
And note the encrypted options does not fully hide/secure your dns traffic.
I prefer Dnscrypt v2 protocol with DNSSec enabled servers.
(Was made for DNS, open source and complete specification since 2013)

edit:
Unbound_manager, In Gui DoT and DNSCrypt-proxy do not work together.
Recommend to read up on the differens between them and test what you like best.
Unbound_manager
DoT(stubby)
DNSCrypt-proxy
Thanks for the help, you answered my question in the edit at the bottom. It looks like I have a lot more reading to do first before changing my current settings
 

L&LD

Part of the Furniture
There is nothing to change. Being your own DNS server is as safe as you can be when online/connected.

All the other options are just like your elderly aunt telling you 'it's okay, it just a bump, it will feel better soon'. :)
 

Similar threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top