Un cache-proxy DNS con supporto a DoH, DNSCrypt e Anonymized DNSCrypt https://dnscrypt.info/
Go to file
Frank Denis e210fc537e Ignore the Cache-Control: max-age header
What's in the DNS packet is a better source of truth.

There was also an inconsistency between the TTL from the
max-age header (as returned in a response that wasn't cached) and
a response from the cache (using TTLs from the DNS packet).

So, just use what's in the packet.

Reported by @vavrusam, thanks!
2018-04-01 21:41:36 +02:00
dnscrypt-proxy Ignore the Cache-Control: max-age header 2018-04-01 21:41:36 +02:00
systemd Do not assume that the kernel supports IPv6 2018-03-29 16:30:35 +02:00
utils/generate-domains-blacklists Add liveinternet.ru to the whitelist 2018-03-27 00:22:13 +02:00
vendor Patch service_upstart 2018-03-26 20:46:51 +02:00
windows +x 2018-01-25 15:56:28 +01:00
.gitignore Reorganize .gitignore 2018-01-17 17:40:37 +01:00
.travis.yml Just build freebsd-arm to be consistent with other builds 2018-03-25 11:29:49 +02:00
ChangeLog Update ChangeLog 2018-03-28 14:46:20 +02:00
Gopkg.lock Update deps; especially for chacha20 2018-03-26 20:46:25 +02:00
Gopkg.toml Update deps 2018-03-07 18:29:26 +01:00
LICENSE ISC license 2018-01-13 00:22:21 +01:00
README.md em dash 2018-04-01 17:19:39 +02:00
logo.png Recompress the logo 2018-02-03 12:15:24 +01:00

README.md

Build Status

dnscrypt-proxy 2

A flexible DNS proxy, with support for modern encrypted DNS protocols such as DNSCrypt v2 and DNS-over-HTTP/2.

dnscrypt-proxy 2.0.8 final is available for download!

Features

  • DNS traffic encryption and authentication. Supports DNS-over-HTTPS (DoH) and DNSCrypt.
  • DNSSEC compatible
  • DNS query monitoring, with separate log files for regular and suspicious queries
  • Pattern-based local blocking of DNS names and IP addresses
  • Time-based filtering, with a flexible weekly schedule
  • Transparent redirection of specific domains to specific resolvers
  • DNS caching, to reduce latency and improve privacy
  • Local IPv6 blocking to reduce latency on IPv4-only networks
  • Load balancing: pick a set of resolvers, dnscrypt-proxy will automatically measure and keep track of their speed, and balance the traffic across the fastest available ones.
  • Cloaking: like a HOSTS file on steroids, that can return preconfigured addresses for specific names, or resolve and return the IP address of other names. This can be used for local development as well as to enforce safe search results on Google, Yahoo and Bing.
  • Automatic background updates of resolvers lists
  • Can force outgoing connections to use TCP; useful with tunnels such as Tor.

It includes all the major features from dnscrypt-proxy 1.9.5, with improved reliability, flexibility, usability and performance.

Pre-built binaries

Up-to-date, pre-built binaries are available for:

  • Android/arm
  • Android/arm64
  • Android/x86
  • Android/x86_64
  • Dragonfly BSD
  • FreeBSD/arm
  • FreeBSD/x86
  • FreeBSD/x86_64
  • Linux/arm
  • Linux/arm64
  • Linux/mips
  • Linux/mipsle
  • Linux/mips64
  • Linux/mips64le
  • Linux/x86
  • Linux/x86_64
  • MacOS X
  • NetBSD/x86
  • NetBSD/x86_64
  • OpenBSD/x86
  • OpenBSD/x86_64
  • Windows
  • Windows 64 bit