dnscrypt-proxy/README.md at 9e2a945fff077cc4f80fa53a458f9447efa18abe

Overview

A flexible DNS proxy, with support for modern encrypted DNS protocols such as DNSCrypt v2 and DNS-over-HTTPS.

Available as source code and pre-built binaries for most operating systems and architectures (see below).

DNS traffic encryption and authentication. Supports DNS-over-HTTPS (DoH) using TLS 1.3, and DNSCrypt.
DNS query monitoring, with separate log files for regular and suspicious queries
Filtering: block ads, malware, and other unwanted content. Compatible with all DNS services
Time-based filtering, with a flexible weekly schedule
Transparent redirection of specific domains to specific resolvers
DNS caching, to reduce latency and improve privacy
Local IPv6 blocking to reduce latency on IPv4-only networks
Load balancing: pick a set of resolvers, dnscrypt-proxy will automatically measure and keep track of their speed, and balance the traffic across the fastest available ones.
Cloaking: like a HOSTS file on steroids, that can return preconfigured addresses for specific names, or resolve and return the IP address of other names. This can be used for local development as well as to enforce safe search results on Google, Yahoo and Bing.
Automatic background updates of resolvers lists
Can force outgoing connections to use TCP
Supports SOCKS proxies
Compatible with DNSSEC

Up-to-date, pre-built binaries are available for:

How to use these files, as well as how to verify their signatures, are documented in the installation instructions.