dnscrypt-proxy

dnscrypt-proxy at a glance

dnscrypt-proxy is a locally running DNS proxy that secures name resolution through encrypted protocols. It supports DNSCrypt v2, DNS-over-HTTPS over TLS and QUIC, Anonymized DNSCrypt, and Oblivious DoH, and can be combined with block lists to filter ads, trackers, and malicious domains. Administrators run it on servers, gateways, or individual workstations, often alongside resolvers such as Pi-hole or Unbound.

It is distributed as releases in the GitHub project: precompiled binaries for many operating systems and architectures, together with a changelog. There is no automatic updater; new builds are applied manually or through a package manager.

Before switching, back up the configuration file, as options and defaults can change between builds. After updating, review the selected resolvers, the block lists, and caching behavior. The changelog lists new switches and, occasionally, removed options that would otherwise prevent the proxy from starting.