FAQ: Clarify why IP addresses are used instead of hostnames

Quentin McGaw
2022-06-11 21:06:46 -04:00
parent 499a9c3c2b
commit 1841b20447
+3 -3
@@ -11,10 +11,10 @@ If `DOT=on`, after tunneling, it downloads at start (and periodically if `DNS_UP
## Server information ## Server information
Gluetun works by using IP addresses directly to connect to VPN servers, instead of VPN server hostnames. Gluetun uses IP addresses instead of hostnames to connect to VPN servers, to avoid doing a DNS resolution at start.
This is like so to avoid leaking a DNS resolution out of the VPN at start (to resolve `vpn.domain.com` to an IP address). The main reason is Gluetun should not have connectivity before it establishes the VPN connection,
Otherwise your ISP/government/other could know which VPN server you are connecting to, or at best see you use encrypted DNS queries. such that connected containers (or other machines) won't leak their data out for the few starting seconds.
The program comes with more than 10,000 IP addresses built in the program, split for each VPN provider supported. The program comes with more than 10,000 IP addresses built in the program, split for each VPN provider supported.