Question of understanding: RT-AC68U Unbound - WAN DNS - pihole

[stefan21]

For my understanding: while running unbound on an asus RT-AC68U (Firmware-Version: 386.7_2), and running a pihole in the LAN on a dietpi, I configured the upstream DNS for the pihole with the IP of the router. Should the WAN-DNS-settings of the router point to the IP of the router itself, to the IP of the pihole or to an external DNS e.g. 1.1.1.1?

 

[stefan21]

Found out for myself. For my configuration the WAN DNS has to be external.

 

[bennor]

Should the WAN-DNS-settings of the router point to the IP of the router itself, to the IP of the pihole or to an external DNS e.g. 1.1.1.1?

It should be noted that while Asus documentation recommends using the Pi-Hole IP addresses in the WAN DNS fields, Pi-Hole's documentation does not.

Per Pi-Hole's documentation:

ASUS was so kind to set up a FAQ how to configure their routers together with Pi-hole.

They offer two kinds of setup depending on your router's firmware version. On newer firmware they recommend setting Pi-hole as DNS server for the WAN connection and on older versions for LAN connections. However, we recommend to setup Pi-hole always as DNS server for your LAN! If you do so, Pi-hole's IP is distributed as DNS server via DHCP to your network clients. Each client will directly send their queries to Pi-hole and will be shown individually in Pi-hole's web interface. Additionally, you can use the group management features.