Privacy-Protecting Portable Router: Adding DNS-Over-TLS support to OpenWRT (LEDE) with Unbound

What this post added

This post details the technical steps to configure an OpenWRT router to use DNS-over-TLS (DoT) with Cloudflare's 1.1.1.1 resolver. It involves replacing the default Dnsmasq with Unbound and odhcpd, configuring Unbound to forward queries to Cloudflare's DoT endpoints (port 853), and ensuring proper integration with the router's DHCP configuration. The post demonstrates how to verify the encrypted DNS traffic using packet sniffing.