Shao
Rìu Chiến Vàng Chấm
DNSCrypt-proxy –với sự hỗ trợ cho các giao thức DNS được mã hóa hiện đại như DNSCrypt v2 và DNS-over-HTTP / 2.
Features
- DNS traffic encryption and authentication. Supports DNS-over-HTTPS (DoH) using TLS 1.3, DNSCrypt, Anonymized DNS and ODoH
- Client IP addresses can be hidden using Tor, SOCKS proxies or Anonymized DNS relays
- DNS query monitoring, with separate log files for regular and suspicious queries
- Filtering: block ads, malware, and other unwanted content. Compatible with all DNS services
- Time-based filtering, with a flexible weekly schedule
- Transparent redirection of specific domains to specific resolvers
- DNS caching, to reduce latency and improve privacy
- Local IPv6 blocking to reduce latency on IPv4-only networks
- Load balancing: pick a set of resolvers, dnscrypt-proxy will automatically measure and keep track of their speed, and balance the traffic across the fastest available ones.
- Cloaking: like a HOSTS file on steroids, that can return preconfigured addresses for specific names, or resolve and return the IP address of other names. This can be used for local development as well as to enforce safe search results on Google, Yahoo, DuckDuckGo and Bing
- Automatic background updates of resolvers lists
- Can force outgoing connections to use TCP
- Compatible with DNSSEC
- Includes a local DoH server in order to support ECH (ESNI)
What’s New:
Changelog
- Support for DoH over HTTP/3 (DoH3, HTTP over QUIC) has been added. Compatible servers will automatically use it. Note that QUIC uses UDP (usually over port 443, like DNSCrypt) instead of TCP.
- In previous versions, memory usage kept growing due to channels not being properly closed, causing goroutines to pile up. This was fixed,
resulting in an important reduction of memory usage. Thanks to @lifenjoiner for investigating and fixing this! - DNS64: CNAME records are now translated like other responses. Thanks to @ignoramous for this!
- A relay whose name has been configured, but doesn't exist in the list of available relays is now a hard error. Thanks to @lifenjoiner!
- Mutexes/locking: bug fixes and improvements, by @ignoramous - Official packages now include linux/riscv64 builds.
- dnscrypt-proxy -resolve now reports if ECS (EDNS-clientsubnet) is supported by the server.
- dnscrypt-proxy -list now includes ODoH (Oblivious DoH) servers.
- Local DoH: queries made using the GET method are now handled.
- The service can now be installed on OpenRC-based systems.
- PTR queries are now supported for cloaked domains. Contributed by Ian Bashford, thanks!
Developer: Home Page
License: FreeWare
OS: Window
Sửa lần cuối:
