From 1841b20447b6a0e37176a50ae765d4541a92d57a Mon Sep 17 00:00:00 2001 From: Quentin McGaw Date: Sat, 11 Jun 2022 21:06:46 -0400 Subject: [PATCH] FAQ: Clarify why IP addresses are used instead of hostnames --- FAQ/Explanations.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/FAQ/Explanations.md b/FAQ/Explanations.md index d2e0096..fb39d39 100644 --- a/FAQ/Explanations.md +++ b/FAQ/Explanations.md @@ -11,10 +11,10 @@ If `DOT=on`, after tunneling, it downloads at start (and periodically if `DNS_UP ## Server information -Gluetun works by using IP addresses directly to connect to VPN servers, instead of VPN server hostnames. +Gluetun uses IP addresses instead of hostnames to connect to VPN servers, to avoid doing a DNS resolution at start. -This is like so to avoid leaking a DNS resolution out of the VPN at start (to resolve `vpn.domain.com` to an IP address). -Otherwise your ISP/government/other could know which VPN server you are connecting to, or at best see you use encrypted DNS queries. +The main reason is Gluetun should not have connectivity before it establishes the VPN connection, +such that connected containers (or other machines) won't leak their data out for the few starting seconds. The program comes with more than 10,000 IP addresses built in the program, split for each VPN provider supported.