This commit is contained in:
Frank Denis 2018-02-01 10:34:54 +01:00
parent 6efd904b9f
commit 9cf08bfad7
1 changed files with 1 additions and 35 deletions

View File

@ -6,41 +6,7 @@ A flexible DNS proxy, with support for modern encrypted DNS protocols such as [D
## [dnscrypt-proxy 2.0.0rc is available for download!](https://github.com/jedisct1/dnscrypt-proxy/releases/latest)
## Installation
### How do I install DNSCrypt?
You can't. Because [DNSCrypt](https://github.com/DNSCrypt/dnscrypt-protocol/blob/master/DNSCRYPT-V2-PROTOCOL.txt) is just a specification.
That specification has been implemented in software such as [unbound](https://www.unbound.net/), [dnsdist](https://dnsdist.org/), [dnscrypt-wrapper](https://github.com/cofyc/dnscrypt-wrapper) and [dnscrypt-proxy](https://github.com/jedisct1/dnscrypt-proxy).
dnscrypt-proxy is a flexible DNS proxy. It runs on your computer or router, and can locally block unwanted content, reveal where your devices are silently sending data to, make applications feel faster by caching DNS responses, and improve security and confidentiality by communicating to upstream DNS servers over secure channels.
### Setting up dnscrypt-proxy
1. Modify the [`dnscrypt-proxy.toml`](https://raw.githubusercontent.com/jedisct1/dnscrypt-proxy/master/dnscrypt-proxy/dnscrypt-proxy.toml) configuration file according to your needs.
2. Make sure that nothing else is already listening to port 53 on your system and run (in a console with elevated privileges on Windows) the `dnscrypt-proxy` application. Change your DNS settings to the configured IP address and check that everything works as expected. A DNS query for `resolver.00f.net` should return one of the chosen DNS servers instead of your ISP's resolver.
3. Register as a system service (see below).
### Installing as a system service (Windows, Linux, MacOS)
With administrator privileges, type `dnscrypt-proxy -service install` to register dnscrypt-proxy as a system service, and `dnscrypt-proxy -service start` to start it.
On Windows, this is not even required: you can just double-click on `server-install.bat` to install the service.
Done. It will automatically start at boot.
This setup procedure is compatible with Windows, Linux (systemd, Upstart, SysV), and macOS (launchd).
Other commands include `stop`, `restart` (useful after a configuration change) and `uninstall`.
### Running it as a non-root user on Linux
The following command adds the required attributes to the dnscrypt-proxy file so that it can run as a non-root user:
```sh
sudo setcap cap_net_bind_service=+pe dnscrypt-proxy
```
## [Documentation](https://github.com/jedisct1/dnscrypt-proxy/wiki/)
## Current status/features