Support this project with your organization. This project exists thanks to all the people who contribute.īecome a financial contributor and help us sustain our community. Load balancing: pick a set of resolvers, dnscrypt-proxy will.
How to use these files, as well as how to verify their signatures, are documented in the installation instructions. dnscrypt-proxy provides local service which can be used directly as your local resolver or as a DNS forwarder, encrypting and authenticating requests using the DNSCrypt or DNS-over-HTTPS protocol and passing them to upstream servers. Up-to-date, pre-built binaries are available for:
Although multiple free and open source software implementations exist, the protocol was never proposed to the. In this config, tcp and udp port 53 must be free on the host: docker run -dt -dns 127.0.0.1 -p 53:53/udp -p 53:53/tcp -name dnscrypt-proxy -restart unless-stopped modem7/dnscrypt-proxy. It was originally designed by Frank Denis and Yecheng Fu. Can force outgoing connections to use TCP DNSCrypt is a network protocol that authenticates and encrypts Domain Name System (DNS) traffic between the user's computer and recursive name servers.Automatic background updates of resolvers lists.This can be used for local development as well as to enforce safe search results on Google, Yahoo, DuckDuckGo and Bing Cloaking: like a HOSTS file on steroids, that can return preconfigured addresses for specific names, or resolve and return the IP address of other names.Load balancing: pick a set of resolvers, dnscrypt-proxy will automatically measure and keep track of their speed, and balance the traffic across the fastest available ones.Local IPv6 blocking to reduce latency on IPv4-only networks.DNS caching, to reduce latency and improve privacy.Transparent redirection of specific domains to specific resolvers.Time-based filtering, with a flexible weekly schedule.Filtering: block ads, malware, and other unwanted content.DNS query monitoring, with separate log files for regular and suspicious queries.Client IP addresses can be hidden using Tor, SOCKS proxies or Anonymized DNS relays.Supports DNS-over-HTTPS (DoH) using TLS 1.3, DNSCrypt, Anonymized DNS and ODoH DNS traffic encryption and authentication.dnscrypt-proxy documentation ← Start hereĪvailable as source code and pre-built binaries for most operating systems and architectures (see below).If you are running up-to-date software, replace /v2/ with /v3/ in the sources URLs of the dnscrypt-proxy.toml file (relevant lines start with urls and are present in the sources section). A flexible DNS proxy, with support for modern encrypted DNS protocols such as DNSCrypt v2, DNS-over-HTTPS, Anonymized DNSCrypt and ODoH (Oblivious DoH). THIS LIST IS FOR OLD DNSCRYPT-PROXY VERSIONS Version 2 of the list is for dnscrypt-proxy 2.0.42 users.