padding when unbound does not speak TLS?
cm at appliedprivacy.net
Thu Jul 15 22:24:15 UTC 2021
we run DoH and DoT resolvers where dnsdist
terminates the TLS connection and forwards queries via
plain UDP/53 to multiple unbound instances.
stub --(DoH or DoT)-> dnsdist -(Do53)-> unbound
dnsdist does not support padding .
> pad-responses: <yes or no>
> If enabled, TLS serviced queries that contained an EDNS Padding
> option will cause responses padded to the closest multiple of
> the size specified in pad-responses-block-size. Default is yes.
suggests that it only supports padding on TLS connections.
Is it possible to enable padding in unbound also in cases where unbound
does not speak TLS itself?
More information about the Unbound-users