11383 questions

13559 answers


31881 members

0 votes
173 views 2 comments


My goal was to enable DNSSEC on my RUTX12's DNS server. I've followed variety of OpenWRT-related tutorials. All of the tutorials have one thing in common:

  • use stubby and dnsmasq-full, or
  • use dnsmasq-full.
The difference between "regular" dnsmasq and dnsmasq-full is the DNSSEC support.
I've found that replacing dnsmasq with dnsmasq-full is impossible in RUTX12 because the full version requires newer kernel. So right now I've working DNSSEC validation done by stubby but that information is not propagated downstream due to dnsmasq. I'll try to compile my own dnsmasq-full or dnsmasq with DNSSCE support myself using the SDK.
My question is: Are you guys planning DNSSEC support in the future?
Thank you very much for your time.

1 Answer

0 votes

For now, there are no plans to include DNSSEC functionality to RUTX devices. In the future, if there's more demand it might be considered.

Best answer
Hello Ernestas,

Fair enough. I'll try to dive inside the SDK and if I find a solution I'll post it here for others. The basic configuration I made is very simple and does not require any tweaks (apart of opkg). I plan to find something which will not interfere too much with the standard firmware.

Thank you for you time.

With best regards,

it would be nice to implement DNSSEC pse