Privacy-Protecting Portable Router: Adding DNS-Over-TLS support to OpenWRT (LEDE) with Unbound

This post details the technical steps required to configure an OpenWRT (LEDE) router to use DNS-over-TLS (DoT) with Cloudflare's 1.1.1.1 resolver. It covers replacing the default Dnsmasq with Unbound and odhcpd, configuring Unbound to forward requests to Cloudflare's DoT endpoints, and merging DHCP configurations. The post provides concrete commands and configuration snippets for SSHing into the router, installing packages, and modifying configuration files. It demonstrates the successful encryption of DNS traffic using TLS v1.2.