Mirror of dnscrypt-proxy – DNS encryption over HTTPS and DNSCrypt
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Aleksandr Sergeev a389067d29 Replace “find” with “findstr” in batches (#764) 5 days ago
dnscrypt-proxy Bump 1 week ago
utils/generate-domains-blacklists Update Quidsup URLs 3 weeks ago
vendor Update deps 1 week ago
windows Replace “find” with “findstr” in batches (#764) 5 days ago
.gitignore Reorganize .gitignore 1 year ago
.travis.yml Back to stable Go 4 weeks ago
ChangeLog Bump 1 week ago
LICENSE ISC license 1 year ago
README.md Re-add a big download link in addition to the badge 2 weeks ago
dnscrypt-logo.svg Rename logo.svg 8 months ago
go.mod Bump 1 week ago
go.sum Bump 1 week ago
logo.png Replace logo 8 months ago
logo.svg Fix some discrepancies in SVG logo (#545) 8 months ago


dnscrypt-proxy 2

DNSCrypt-Proxy Release Build Status


A flexible DNS proxy, with support for modern encrypted DNS protocols such as DNSCrypt v2 and DNS-over-HTTPS.

Download the latest release

Available as source code and pre-built binaries for most operating systems and architectures (see below).


  • DNS traffic encryption and authentication. Supports DNS-over-HTTPS (DoH) using TLS 1.3, and DNSCrypt.
  • DNS query monitoring, with separate log files for regular and suspicious queries
  • Filtering: block ads, malware, and other unwanted content. Compatible with all DNS services
  • Time-based filtering, with a flexible weekly schedule
  • Transparent redirection of specific domains to specific resolvers
  • DNS caching, to reduce latency and improve privacy
  • Local IPv6 blocking to reduce latency on IPv4-only networks
  • Load balancing: pick a set of resolvers, dnscrypt-proxy will automatically measure and keep track of their speed, and balance the traffic across the fastest available ones.
  • Cloaking: like a HOSTS file on steroids, that can return preconfigured addresses for specific names, or resolve and return the IP address of other names. This can be used for local development as well as to enforce safe search results on Google, Yahoo and Bing.
  • Automatic background updates of resolvers lists
  • Can force outgoing connections to use TCP
  • Supports SOCKS proxies
  • Compatible with DNSSEC

Pre-built binaries

Up-to-date, pre-built binaries are available for:

  • Android/arm
  • Android/arm64
  • Android/x86
  • Android/x86_64
  • Dragonfly BSD
  • FreeBSD/arm
  • FreeBSD/x86
  • FreeBSD/x86_64
  • Linux/arm
  • Linux/arm64
  • Linux/mips
  • Linux/mipsle
  • Linux/mips64
  • Linux/mips64le
  • Linux/x86
  • Linux/x86_64
  • MacOS X
  • NetBSD/x86
  • NetBSD/x86_64
  • OpenBSD/x86
  • OpenBSD/x86_64
  • Windows
  • Windows 64 bit

How to use these files, as well as how to verify their signatures, are documented in the installation instructions.