A flexible DNS proxy, with support for modern encrypted DNS protocols such as
DNSCrypt v2, DNS-over-HTTPS, Anonymized DNSCrypt and ODoH (Oblivious DoH).
Features:
- DNS traffic encryption and authentication. Supports DNS-over-HTTPS (DoH)
using TLS 1.3 and QUIC, DNSCrypt, Anonymized DNS and ODoH
- Client IP addresses can be hidden using Tor, SOCKS proxies or Anonymized
DNS relays
- DNS query monitoring, with separate log files for regular and suspicious
queries
- Filtering: block ads, malware, and other unwanted content. Compatible with
all DNS services
- Time-based filtering, with a flexible weekly schedule
- Transparent redirection of specific domains to specific resolvers
- Optional hot-reloading of configuration files (disabled by default from
v2.1.10)
- DNS caching, to reduce latency and improve privacy
- Local IPv6 blocking to reduce latency on IPv4-only networks
- Load balancing: pick a set of resolvers, dnscrypt-proxy will automatically
measure and keep track of their speed, and balance the traffic across the
fastest available ones.
- Cloaking: like a HOSTS file on steroids, that can return preconfigured
addresses for specific names, or resolve and return the IP address of other
names. This can be used for local development as well as to enforce safe
search results on Google, Yahoo, DuckDuckGo and Bing
- Automatic background updates of resolvers lists
- Can force outgoing connections to use TCP
- Compatible with DNSSEC
- Includes a local DoH server in order to support ECH (ESNI)
Provides
Requires
License
Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0 AND Zlib
Changelog
* Mon Feb 02 2026 Maxwell G <maxwell@gtmx.me> - 2.1.14-6
- Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26
* Fri Jan 16 2026 Fedora Release Engineering <releng@fedoraproject.org> - 2.1.14-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
* Fri Jan 16 2026 Fedora Release Engineering <releng@fedoraproject.org> - 2.1.14-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
* Fri Oct 10 2025 Maxwell G <maxwell@gtmx.me> - 2.1.14-3
- Rebuild for golang 1.25.2
* Tue Sep 23 2025 Robert-André Mauchin <eclipseo@mauchin.fr> - 2.1.14-2
- Fix service install
* Sun Sep 21 2025 Robert-André Mauchin <eclipseo@mauchin.fr> - 2.1.14-1
- Update to 2.1.14
* Fri Aug 15 2025 Maxwell G <maxwell@gtmx.me> - 2.1.5-10
- Rebuild for golang-1.25.0
* Fri Aug 15 2025 Maxwell G <maxwell@gtmx.me> - 2.1.5-9
- Revert "Rebuild for golang-1.25.0"
* Fri Aug 15 2025 Maxwell G <maxwell@gtmx.me> - 2.1.5-8
- Rebuild for golang-1.25.0
* Wed Jul 23 2025 Fedora Release Engineering <releng@fedoraproject.org> - 2.1.5-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Thu Jan 16 2025 Fedora Release Engineering <releng@fedoraproject.org> - 2.1.5-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Wed Jul 17 2024 Fedora Release Engineering <releng@fedoraproject.org> - 2.1.5-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Sun Feb 11 2024 Maxwell G <maxwell@gtmx.me> - 2.1.5-4
- Rebuild for golang 1.22.0
Files
/etc/dnscrypt-proxy
/etc/dnscrypt-proxy/allowed-ips.txt
/etc/dnscrypt-proxy/allowed-names.txt
/etc/dnscrypt-proxy/blacklist.txt
/etc/dnscrypt-proxy/blocked-ips.txt
/etc/dnscrypt-proxy/blocked-names.txt
/etc/dnscrypt-proxy/captive-portals.txt
/etc/dnscrypt-proxy/cloaking-rules.txt
/etc/dnscrypt-proxy/dnscrypt-proxy.toml
/etc/dnscrypt-proxy/forwarding-rules.txt
/etc/dnscrypt-proxy/whitelist.txt
/usr/bin/dnscrypt-proxy
/usr/lib/.build-id
/usr/lib/.build-id/e4
/usr/lib/.build-id/e4/d504cff4553469d54d47a7f9f6dfe082db5039
/usr/lib/systemd/system/dnscrypt-proxy.service
/usr/share/doc/dnscrypt-proxy
/usr/share/doc/dnscrypt-proxy/ChangeLog
/usr/share/doc/dnscrypt-proxy/README.md
/usr/share/licenses/dnscrypt-proxy
/usr/share/licenses/dnscrypt-proxy/LICENSE
/usr/share/licenses/dnscrypt-proxy/modules.txt
/usr/share/licenses/dnscrypt-proxy/vendor
/usr/share/licenses/dnscrypt-proxy/vendor/github.com
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/BurntSushi
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/BurntSushi/toml
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/BurntSushi/toml/COPYING
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/VividCortex
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/VividCortex/ewma
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/VividCortex/ewma/LICENSE
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/coreos
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/coreos/go-systemd
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/coreos/go-systemd/LICENSE
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/coreos/go-systemd/NOTICE
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/davecgh
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/davecgh/go-spew
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/davecgh/go-spew/LICENSE
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/dchest
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/dchest/safefile
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/dchest/safefile/LICENSE
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/fsnotify
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/fsnotify/fsnotify
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/fsnotify/fsnotify/LICENSE
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/golang
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/golang/protobuf
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/golang/protobuf/AUTHORS
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/golang/protobuf/LICENSE
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/gorilla
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/gorilla/websocket
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/gorilla/websocket/AUTHORS
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/gorilla/websocket/LICENSE
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/hashicorp
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/hashicorp/go-immutable-radix
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/hashicorp/go-immutable-radix/LICENSE
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/hashicorp/go-syslog
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/hashicorp/go-syslog/LICENSE
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/hashicorp/golang-lru
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/hashicorp/golang-lru/LICENSE
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/hectane
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/hectane/go-acl
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/hectane/go-acl/LICENSE.txt
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/jedisct1
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/jedisct1/dlog
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/jedisct1/dlog/LICENSE
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/jedisct1/go-clocksmith
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/jedisct1/go-clocksmith/LICENSE
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/jedisct1/go-dnsstamps
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/jedisct1/go-dnsstamps/LICENSE
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/jedisct1/go-hpke-compact
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/jedisct1/go-hpke-compact/LICENSE
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/jedisct1/go-ipcrypt
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/jedisct1/go-ipcrypt/LICENSE
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/jedisct1/go-minisign
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/jedisct1/go-minisign/LICENSE
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/jedisct1/go-sieve-cache
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/jedisct1/go-sieve-cache/LICENSE
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/jedisct1/xsecretbox
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/jedisct1/xsecretbox/LICENSE
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/k-sone
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/k-sone/critbitgo
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/k-sone/critbitgo/LICENSE
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/kardianos
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/kardianos/service
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/kardianos/service/LICENSE
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/lifenjoiner
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/lifenjoiner/dhcpdns
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/lifenjoiner/dhcpdns/LICENSE
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/miekg
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/miekg/dns
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/miekg/dns/AUTHORS
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/miekg/dns/COPYRIGHT
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/miekg/dns/LICENSE
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/pkg
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/pkg/errors
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/pkg/errors/LICENSE
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/pmezard
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/pmezard/go-difflib
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/pmezard/go-difflib/LICENSE
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/powerman
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/powerman/check
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/powerman/check/LICENSE
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/powerman/deepequal
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/powerman/deepequal/LICENSE
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/powerman/deepequal/LICENSE-go
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/quic-go
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/quic-go/qpack
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/quic-go/qpack/LICENSE.md
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/quic-go/quic-go
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/quic-go/quic-go/LICENSE
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/smartystreets
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/smartystreets/goconvey
/usr/share/licenses/dnscrypt-proxy/vendor/github.com/smartystreets/goconvey/LICENSE.md
/usr/share/licenses/dnscrypt-proxy/vendor/go.uber.org
/usr/share/licenses/dnscrypt-proxy/vendor/go.uber.org/mock
/usr/share/licenses/dnscrypt-proxy/vendor/go.uber.org/mock/AUTHORS
/usr/share/licenses/dnscrypt-proxy/vendor/go.uber.org/mock/LICENSE
/usr/share/licenses/dnscrypt-proxy/vendor/golang.org
/usr/share/licenses/dnscrypt-proxy/vendor/golang.org/x
/usr/share/licenses/dnscrypt-proxy/vendor/golang.org/x/crypto
/usr/share/licenses/dnscrypt-proxy/vendor/golang.org/x/crypto/LICENSE
/usr/share/licenses/dnscrypt-proxy/vendor/golang.org/x/crypto/PATENTS
/usr/share/licenses/dnscrypt-proxy/vendor/golang.org/x/mod
/usr/share/licenses/dnscrypt-proxy/vendor/golang.org/x/mod/LICENSE
/usr/share/licenses/dnscrypt-proxy/vendor/golang.org/x/mod/PATENTS
/usr/share/licenses/dnscrypt-proxy/vendor/golang.org/x/net
/usr/share/licenses/dnscrypt-proxy/vendor/golang.org/x/net/LICENSE
/usr/share/licenses/dnscrypt-proxy/vendor/golang.org/x/net/PATENTS
/usr/share/licenses/dnscrypt-proxy/vendor/golang.org/x/sync
/usr/share/licenses/dnscrypt-proxy/vendor/golang.org/x/sync/LICENSE
/usr/share/licenses/dnscrypt-proxy/vendor/golang.org/x/sync/PATENTS
/usr/share/licenses/dnscrypt-proxy/vendor/golang.org/x/sys
/usr/share/licenses/dnscrypt-proxy/vendor/golang.org/x/sys/LICENSE
/usr/shar