This project exists thanks to all the people who contribute.īecome a financial contributor and help us sustain our community. How to use these files, as well as how to verify their signatures, are documented in the installation instructions. Up-to-date, pre-built binaries are available for:

Includes a local DoH server in order to support ECH (ESNI).

Can force outgoing connections to use TCP.

Automatic background updates of resolvers lists.

This can be used for local development as well as to enforce safe search results on Google, Yahoo, DuckDuckGo and Bing

Cloaking: like a HOSTS file on steroids, that can return preconfigured addresses for specific names, or resolve and return the IP address of other names.

Load balancing: pick a set of resolvers, dnscrypt-proxy will automatically measure and keep track of their speed, and balance the traffic across the fastest available ones.

Local IPv6 blocking to reduce latency on IPv4-only networks.

DNS caching, to reduce latency and improve privacy.

Transparent redirection of specific domains to specific resolvers.

Time-based filtering, with a flexible weekly schedule.

Filtering: block ads, malware, and other unwanted content.

DNS query monitoring, with separate log files for regular and suspicious queries.

Client IP addresses can be hidden using Tor, SOCKS proxies or Anonymized DNS relays.

Supports DNS-over-HTTPS (DoH) using TLS 1.3 and QUIC, DNSCrypt, Anonymized DNS and ODoH

DNS traffic encryption and authentication.

dnscrypt-proxy documentation ← Start hereĪvailable as source code and pre-built binaries for most operating systems and architectures (see below).A flexible DNS proxy, with support for modern encrypted DNS protocols such as DNSCrypt v2, DNS-over-HTTPS, Anonymized DNSCrypt and ODoH (Oblivious DoH).

Dnscrypt github