dnscrypt-proxy

mirror of https://github.com/DNSCrypt/dnscrypt-proxy.git synced 2024-11-11 01:27:18 +03:00

dnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protocols.

anonymized anonymized-dns dns dns-over-https dnscrypt dnscrypt-proxy dnscrypt-proxy2 doh oblivious-dns-over-https oblivious-doh odoh proxy starred-dnscrypt-repo starred-repo

Go to file

Frank Denis 7a8deebaf1 DoH: implement support for multiples cert hashes		2018-01-31 18:16:54 +01:00
dnscrypt-proxy	DoH: implement support for multiples cert hashes	2018-01-31 18:16:54 +01:00
systemd	systemd support	2018-01-24 14:44:32 +01:00
utils/generate-domains-blacklists	Import the generate-domains-blacklists tool	2018-01-17 15:28:07 +01:00
vendor	Update dlog to master which just calls time.Local()	2018-01-31 10:14:06 +01:00
windows	+x	2018-01-25 15:56:28 +01:00
.gitignore	Reorganize .gitignore	2018-01-17 17:40:37 +01:00
.travis.yml	Add mipsle binaries	2018-01-27 18:26:07 +01:00
Gopkg.lock	Update dlog to master which just calls time.Local()	2018-01-31 10:14:06 +01:00
Gopkg.toml	Update dlog to master which just calls time.Local()	2018-01-31 10:14:06 +01:00
LICENSE	ISC license	2018-01-13 00:22:21 +01:00
logo.png	crop	2018-01-10 23:58:54 +01:00
README.md	Start moving things to the wiki	2018-01-30 20:23:37 +01:00

README.md

A flexible DNS proxy, with support for modern encrypted DNS protocols such as DNSCrypt v2 and DNS-over-HTTP/2.

dnscrypt-proxy 2.0.0beta12 is available for download!

Installation

How do I install DNSCrypt?

You can't. Because DNSCrypt is just a specification.

That specification has been implemented in software such as unbound, dnsdist, dnscrypt-wrapper and dnscrypt-proxy.

dnscrypt-proxy is a flexible DNS proxy. It runs on your computer or router, and can locally block unwanted content, reveal where your devices are silently sending data to, make applications feel faster by caching DNS responses, and improve security and confidentiality by communicating to upstream DNS servers over secure channels.

Setting up dnscrypt-proxy

Modify the dnscrypt-proxy.toml configuration file according to your needs.
Make sure that nothing else is already listening to port 53 on your system and run (in a console with elevated privileges on Windows) the dnscrypt-proxy application. Change your DNS settings to the configured IP address and check that everything works as expected. A DNS query for resolver.00f.net should return one of the chosen DNS servers instead of your ISP's resolver.
Register as a system service (see below).

Installing as a system service (Windows, Linux, MacOS)

With administrator privileges, type dnscrypt-proxy -service install to register dnscrypt-proxy as a system service, and dnscrypt-proxy -service start to start it.

On Windows, this is not even required: you can just double-click on server-install.bat to install the service.

Done. It will automatically start at boot.

This setup procedure is compatible with Windows, Linux (systemd, Upstart, SysV), and macOS (launchd).

Other commands include stop, restart (useful after a configuration change) and uninstall.

Running it as a non-root user on Linux

The following command adds the required attributes to the dnscrypt-proxy file so that it can run as a non-root user:

sudo setcap cap_net_bind_service=+pe dnscrypt-proxy

Current status/features

The current 2.0.0 beta version includes all the major features from dnscrypt-proxy 1.9.5 (support for dnscrypt v2, synthetic IPv6 responses, logging, blocking, forwarding and caching), with improved reliability, flexbility, usability and performance.

It includes support for DNS-over-HTTP/2 (DoH), the successor to DNS-over-TLS.

Pre-built binaries

Up-to-date, pre-built binaries are available for:

Dragonfly BSD
FreeBSD/x86
FreeBSD/x86_64
Linux/arm
Linux/arm64
Linux/mips
Linux/mipsle
Linux/mips64
Linux/mips64le
Linux/x86
Linux/x86_64
MacOS X
NetBSD/x86
NetBSD/x86_64
OpenBSD/x86
OpenBSD/x86_64
Windows
Windows 64 bit