From c80b7b81c1201e66bcfe6ca89ae4bf863d46052f Mon Sep 17 00:00:00 2001 From: quindecim <49964366+quindecim@users.noreply.github.com> Date: Tue, 6 Dec 2022 23:15:19 +0100 Subject: [PATCH] Add `openinternet` resolver + optimized relays https://github.com/DNSCrypt/dnscrypt-resolvers/pull/762/commits/0b04c09ab4f0bc569c3f351ba77f54a00f98f992 https://github.com/DNSCrypt/dnscrypt-resolvers/commit/aeba40a404b83725403ba90e1a3ac013a30dc40d --- CHANGELOG.md | 5 +++++ README.md | 2 +- config/dnscrypt-proxy.toml | 10 +++++----- 3 files changed, 11 insertions(+), 6 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 944833f..3a56c78 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,10 +4,15 @@ ### Added - Script in `customize.sh` file for automatically disable Private DNS feature. - `dct-nl1` resolver (DNSCrypt | IPv4 only | Non-logging | Non-filtering | DNSSEC | Naaldwijk, Netherlands). +- `openinternet` resolver (DNSCrypt resolver colocated at Sonic.net in Santa Rosa, CA in the United States. No log, no filter, DNSSEC. Provided by https://openinternet.io). + +### Changed +- Optimized relays. ### Removed - `dnscrypt.eu-nl` resolver (ceased). - `dotya.ml` resolver (unresponsive). +- `resolver4.dns.openinternet.io` resolver (changed). - `sgp-dn53` resolver (unresponsive). ### Fixed diff --git a/README.md b/README.md index 57e0db1..87e0164 100644 --- a/README.md +++ b/README.md @@ -22,7 +22,7 @@ All the binary files are downloaded from the [official release page](https://git ## Differences from the main project -- `server_names` = `acsacsar-ams-ipv4` [NLD], `altername` [RUS], `ams-dnscrypt-nl` [NLD], `d0wn-tz-ns1` [TZA], `dct-at1` [AUS], `dct-de1` [DEU], `dct-nl1` [NLD], `dct-ru1` [RUS], `dns.watch` [DEU], `dnscrypt.be` [BEL], `dnscrypt.ca-1` [CAN], `dnscrypt.ca-2` [CAN], `dnscrypt.pl` [POL], `dnscrypt.uk-ipv4` [GBR], `dnswarden-uncensor-dc-swiss` [CHE], `meganerd` [NLD], `plan9dns-fl` [USA], `plan9dns-mx` [MEX], `plan9dns-nj` [USA], `pryv8boi` [DEU], `resolver4.dns.openinternet.io` [USA], `sby-limotelu` [IDN], `scaleway-ams` [NLD], `scaleway-fr` [FRA], `serbica` [NLD], `starrydns` [SGP], `techsaviours.org-dnscrypt` [DEU], `v.dnscrypt.uk-ipv4` [GBR] are the resolvers in use. +- `server_names` = `acsacsar-ams-ipv4` [NLD], `altername` [RUS], `ams-dnscrypt-nl` [NLD], `d0wn-tz-ns1` [TZA], `dct-at1` [AUS], `dct-de1` [DEU], `dct-nl1` [NLD], `dct-ru1` [RUS], `dns.watch` [DEU], `dnscrypt.be` [BEL], `dnscrypt.ca-1` [CAN], `dnscrypt.ca-2` [CAN], `dnscrypt.pl` [POL], `dnscrypt.uk-ipv4` [GBR], `dnswarden-uncensor-dc-swiss` [CHE], `meganerd` [NLD], `openinternet` [USA], `plan9dns-fl` [USA], `plan9dns-mx` [MEX], `plan9dns-nj` [USA], `pryv8boi` [DEU], `sby-limotelu` [IDN], `scaleway-ams` [NLD], `scaleway-fr` [FRA], `serbica` [NLD], `starrydns` [SGP], `techsaviours.org-dnscrypt` [DEU], `v.dnscrypt.uk-ipv4` [GBR] are the resolvers in use. - `doh_servers = false` (disable servers implementing the `DNS-over-HTTPS` protocol) diff --git a/config/dnscrypt-proxy.toml b/config/dnscrypt-proxy.toml index 5ad1123..94fbdb6 100644 --- a/config/dnscrypt-proxy.toml +++ b/config/dnscrypt-proxy.toml @@ -29,7 +29,7 @@ ## ## Remove the leading # first to enable this; lines starting with # are ignored. -server_names = ['acsacsar-ams-ipv4', 'altername', 'ams-dnscrypt-nl', 'd0wn-tz-ns1', 'dct-at1', 'dct-de1', 'dct-nl1', 'dct-ru1', 'dns.watch', 'dnscrypt.be', 'dnscrypt.ca-1', 'dnscrypt.ca-2', 'dnscrypt.pl', 'dnscrypt.uk-ipv4', 'dnswarden-uncensor-dc-swiss', 'meganerd', 'plan9dns-fl', 'plan9dns-mx', 'plan9dns-nj', 'pryv8boi', 'resolver4.dns.openinternet.io', 'sby-limotelu', 'scaleway-ams', 'scaleway-fr', 'serbica', 'starrydns', 'techsaviours.org-dnscrypt', 'v.dnscrypt.uk-ipv4'] +server_names = ['acsacsar-ams-ipv4', 'altername', 'ams-dnscrypt-nl', 'd0wn-tz-ns1', 'dct-at1', 'dct-de1', 'dct-nl1', 'dct-ru1', 'dns.watch', 'dnscrypt.be', 'dnscrypt.ca-1', 'dnscrypt.ca-2', 'dnscrypt.pl', 'dnscrypt.uk-ipv4', 'dnswarden-uncensor-dc-swiss', 'meganerd', 'openinternet', 'plan9dns-fl', 'plan9dns-mx', 'plan9dns-nj', 'pryv8boi', 'sby-limotelu', 'scaleway-ams', 'scaleway-fr', 'serbica', 'starrydns', 'techsaviours.org-dnscrypt', 'v.dnscrypt.uk-ipv4'] ## List of local addresses and ports to listen to. Can be IPv4 and/or IPv6. @@ -812,17 +812,17 @@ fragments_blocked = ['cisco', 'cisco-ipv6', 'cisco-familyshield', 'cisco-familys { server_name='dct-ru1', via=['anon-cs-czech', 'anon-techsaviours.org'] }, { server_name='dns.watch', via=['anon-cs-de', 'anon-techsaviours.org'] }, { server_name='dnscrypt.be', via=['anon-cs-belgium', 'anon-serbica'] }, - { server_name='dnscrypt.ca-1', via=['anon-cs-montreal2', 'anon-inconnu'] }, - { server_name='dnscrypt.ca-2', via=['anon-cs-montreal2', 'anon-inconnu'] }, + { server_name='dnscrypt.ca-1', via=['anon-cs-montreal2', 'anon-openinternet'] }, + { server_name='dnscrypt.ca-2', via=['anon-cs-montreal2', 'anon-openinternet'] }, { server_name='dnscrypt.pl', via=['anon-cs-poland', 'anon-techsaviours.org'] }, { server_name='dnscrypt.uk-ipv4', via=['anon-cs-london', 'anon-scaleway'] }, { server_name='dnswarden-uncensor-dc-swiss', via=['anon-cs-fr', 'anon-kama'] }, { server_name='meganerd', via=['anon-acsacsar-ams-ipv4', 'anon-scaleway-ams'] }, - { server_name='plan9dns-fl', via=['anon-cs-fl', 'anon-inconnu'] }, + { server_name='openinternet', via=['anon-cs-montreal2', 'anon-inconnu'] }, + { server_name='plan9dns-fl', via=['anon-cs-tx', 'anon-inconnu'] }, { server_name='plan9dns-mx', via=['anon-cs-tx2', 'anon-inconnu'] }, { server_name='plan9dns-nj', via=['anon-cs-nyc1', 'anon-inconnu'] }, { server_name='pryv8boi', via=['anon-cs-de', 'anon-techsaviours.org'] }, - { server_name='resolver4.dns.openinternet.io', via=['anon-cs-montreal2', 'anon-inconnu'] }, { server_name='sby-limotelu', via=['anon-cs-sydney', 'anon-tiarap'] }, { server_name='scaleway-ams', via=['anon-meganerd', 'anon-serbica'] }, { server_name='scaleway-fr', via=['anon-cs-fr', 'anon-dnscrypt.uk-ipv4'] },