summary refs log tree commit diff
path: root/nixos/modules/services/networking
diff options
context:
space:
mode:
authorJoachim Fasting <joachifm@fastmail.fm>2017-03-09 20:32:03 +0100
committerJoachim Fasting <joachifm@fastmail.fm>2017-03-10 18:54:52 +0100
commit5279ec111fef20a04155537ec19d8f5b36a4d50e (patch)
treec76e08c6874c9ecd491c25595d72674b6c14e9de /nixos/modules/services/networking
parentc0a8a9205b590828c2a174f751c80908e632f734 (diff)
downloadnixlib-5279ec111fef20a04155537ec19d8f5b36a4d50e.tar
nixlib-5279ec111fef20a04155537ec19d8f5b36a4d50e.tar.gz
nixlib-5279ec111fef20a04155537ec19d8f5b36a4d50e.tar.bz2
nixlib-5279ec111fef20a04155537ec19d8f5b36a4d50e.tar.lz
nixlib-5279ec111fef20a04155537ec19d8f5b36a4d50e.tar.xz
nixlib-5279ec111fef20a04155537ec19d8f5b36a4d50e.tar.zst
nixlib-5279ec111fef20a04155537ec19d8f5b36a4d50e.zip
nixos/dnscrypt-proxy docs: reword section on forwarding
Newer versions of DNSCrypt proxy *can* cache lookups (via
plugin); make the wording more neutral wrt. why one might want
to run the proxy in a forwarding setup.
Diffstat (limited to 'nixos/modules/services/networking')
-rw-r--r--nixos/modules/services/networking/dnscrypt-proxy.xml12
1 files changed, 4 insertions, 8 deletions
diff --git a/nixos/modules/services/networking/dnscrypt-proxy.xml b/nixos/modules/services/networking/dnscrypt-proxy.xml
index 982961833ad2..555c6df4d551 100644
--- a/nixos/modules/services/networking/dnscrypt-proxy.xml
+++ b/nixos/modules/services/networking/dnscrypt-proxy.xml
@@ -31,15 +31,12 @@
 
   </sect1>
 
-  <sect1><title>As a forwarder for a caching DNS client</title>
+  <sect1><title>As a forwarder for another DNS client</title>
 
   <para>
-    By default, DNSCrypt proxy acts as a transparent proxy for the
-    system stub resolver. Because the client does not cache lookups, this
-    setup can significantly slow down e.g., web browsing. The recommended
-    configuration is to run DNSCrypt proxy as a forwarder for a caching DNS
-    client. To achieve this, change the default proxy listening port to
-    a non-standard value and point the caching client to it:
+    To run the DNSCrypt proxy client as a forwarder for another
+    DNS client, change the default proxy listening port to a
+    non-standard value and point the other client to it:
     <programlisting>
       services.dnscrypt-proxy.localPort = 43;
     </programlisting>
@@ -60,7 +57,6 @@
   <para>
     <programlisting>
       {
-        networking.nameservers = [ "127.0.0.1" ];
         services.unbound.enable = true;
         services.unbound.forwardAddresses = [ "127.0.0.1@43" ];
       }