OpenWrt DNS and Mesh Setup Rules
Encrypted DNS Integration
https-dns-proxyon OpenWrt auto-configures dnsmasq on install: it adds itself as upstream DNS server and restarts dnsmasq. No manual dnsmasq configuration needed for basic DoH setup.The configure task only needs to:
- Install
https-dns-proxy(with retries per network restart rules) - Optionally configure specific DoH providers via UCI
- Verify DNS resolution works through the proxy
- Install
Mesh Networking Setup
Mesh satellite nodes use WDS AP/STA for wireless backhaul without requiring PCIe passthrough.
The
iwpackage must be pre-installed in custom image for namespace-aware WiFi detection via netlink.
Container Networking Pattern
- Container networking follows host topology:
- LAN hosts (
router_nodes,lan_hosts) → OpenWrt LAN subnet (10.10.10.x), LAN bridge - WAN hosts → private NAT bridge (
vmbr_ct), 10.99.{host_id}.{offset}/24, DNS8.8.8.8 - WAN containers are isolated on per-host /24 subnets — no IP collision risk
- LAN hosts (