Update to 2.0.29-beta.3

 Enabled anonymized_dns feature (each resolver has 2 relays)
 Added scaleway-fr resolver (DNSSEC/Non-logged/Uncensored - Maintained by Frank Denis - https://fr.dnscrypt.info)
This commit is contained in:
quindecim 2019-10-26 14:00:16 -04:00
parent c472e9fb72
commit b143b936c7
1 changed files with 58 additions and 7 deletions

View File

@ -27,11 +27,10 @@
## The proxy will automatically pick the fastest, working servers from the list. ## The proxy will automatically pick the fastest, working servers from the list.
## Remove the leading # first to enable this; lines starting with # are ignored. ## Remove the leading # first to enable this; lines starting with # are ignored.
server_names = ['dnscrypt.nl-ns0', 'dnscrypt.uk-ipv4', 'dnscrypt.eu-dk', 'dnscrypt.eu-nl', 'dnswarden-dc1', 'dnswarden-dc2', 'charis', 'suami'] server_names = ['dnscrypt.nl-ns0', 'dnscrypt.uk-ipv4', 'dnscrypt.eu-dk', 'dnscrypt.eu-nl', 'dnswarden-dc1', 'dnswarden-dc2', 'charis', 'scaleway-fr', 'suami']
## List of local addresses and ports to listen to. Can be IPv4 and/or IPv6. ## List of local addresses and ports to listen to. Can be IPv4 and/or IPv6.
## Note: When using systemd socket activation, choose an empty set (i.e. [] ).
listen_addresses = ['127.0.0.1:53'] listen_addresses = ['127.0.0.1:53']
@ -101,7 +100,10 @@ force_tcp = false
# http_proxy = 'http://127.0.0.1:8888' # http_proxy = 'http://127.0.0.1:8888'
## How long a DNS query will wait for a response, in milliseconds ## How long a DNS query will wait for a response, in milliseconds.
## If you have a network with *a lot* of latency, you may need to
## increase this. Startup may be slower if you do so.
## Don't increase it too much. 10000 is the highest reasonable value.
timeout = 1500 timeout = 1500
@ -240,8 +242,8 @@ netprobe_address = '91.239.100.100:53'
## Automatic log files rotation ## Automatic log files rotation
# Maximum log files size in MB # Maximum log files size in MB - Set to 0 for unlimited.
log_files_max_size = 2 log_files_max_size = 10
# How long to keep backup files, in days # How long to keep backup files, in days
log_files_max_age = 7 log_files_max_age = 7
@ -337,6 +339,7 @@ cache_neg_max_ttl = 600
[query_log] [query_log]
## Path to the query log file (absolute, or relative to the same directory as the executable file) ## Path to the query log file (absolute, or relative to the same directory as the executable file)
## Can be /dev/stdout to log to the standard output (and set log_files_max_size to 0)
# file = 'query.log' # file = 'query.log'
@ -529,6 +532,15 @@ cache_neg_max_ttl = 600
minisign_key = 'RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3' minisign_key = 'RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3'
prefix = '' prefix = ''
## Anonymized DNS relays
[sources.'relays']
urls = ['https://github.com/DNSCrypt/dnscrypt-resolvers/raw/master/v2/relays.md', 'https://download.dnscrypt.info/resolvers-list/v2/relays.md']
cache_file = 'relays.md'
minisign_key = 'RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3'
refresh_delay = 72
prefix = ''
## Quad9 over DNSCrypt - https://quad9.net/ ## Quad9 over DNSCrypt - https://quad9.net/
# [sources.quad9-resolvers] # [sources.quad9-resolvers]
@ -546,11 +558,50 @@ cache_neg_max_ttl = 600
# minisign_key = 'RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3' # minisign_key = 'RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3'
################################
# Anonymized DNS #
################################
[anonymized_dns]
## Routes are indirect ways to reach DNSCrypt servers.
##
## A route maps a server name ("server_name") to one or more relays that will be
## used to connect to that server.
##
## A relay can be specified as a DNS Stamp (either a relay stamp, or a
## DNSCrypt stamp), an IP:port, a hostname:port, or a server name.
##
## The following example routes "comodo-02" via `anon-kama` or `anon-ibksturm`,
## and "quad9-dnscrypt-ip4-nofilter-pri" via the relay whose relay DNS stamp
## is "sdns://gRIxMzcuNzQuMjIzLjIzNDo0NDM".
## These are just example routes. Review the list of available relays from the
## "relays.md` file, and, for each server you want to use, define the relays you
## want connections to go through.
##
## Carefully choose relays and servers so that the are run by different entities.
##
## "server_name" can also be set to "*" to define a default route, but this is not
## recommended. if you do so, keep "server_names" short and distinct from relays.
routes = [
{ server_name='dnscrypt.nl-ns0', via=['anon-kama', 'anon-charis'] },
{ server_name='dnscrypt.uk-ipv4', via=['anon-kama', 'anon-suami'] },
{ server_name='dnscrypt.eu-dk', via=['anon-kama', 'anon-charis'] },
{ server_name='dnscrypt.eu-nl', via=['anon-charis', 'anon-suami'] },
{ server_name='dnswarden-dc1', via=['anon-kama', 'anon-charis'] },
{ server_name='dnswarden-dc2', via=['anon-kama', 'anon-charis'] },
{ server_name='charis', via=['anon-kama', 'anon-suami'] },
{ server_name='scaleway-fr', via=['anon-kama', 'anon-suami'] },
{ server_name='suami', via=['anon-ibksturm', 'anon-kama'] }
# { server_name='quad9-dnscrypt-ip4-nofilter-pri', via=['sdns://gRIxMzcuNzQuMjIzLjIzNDo0NDM'] }
]
## Optional, local, static list of additional servers ## Optional, local, static list of additional servers
## Mostly useful for testing your own servers. ## Mostly useful for testing your own servers.
# [static] [static]
# [static.'myserver'] # [static.'myserver']
# stamp = 'sdns:AQcAAAAAAAAAAAAQMi5kbnNjcnlwdC1jZXJ0Lg' # stamp = 'sdns:AQcAAAAAAAAAAAAQMi5kbnNjcnlwdC1jZXJ0Lg'