diff --git a/README.md b/README.md index 53cc5a1..11faf59 100644 --- a/README.md +++ b/README.md @@ -2,24 +2,35 @@ A flexible DNS proxy, with support for modern encrypted DNS protocols such as [DNSCrypt v2](https://github.com/DNSCrypt/dnscrypt-protocol/blob/master/DNSCRYPT-V2-PROTOCOL.txt) and [DNS-over-HTTP/2](https://tools.ietf.org/html/draft-ietf-doh-dns-over-https-03). + +----- + + ## Features - arm, arm64, x86 and x86_64 are supported. -- ipv4 and ipv6 are supported. +- IPv4 and IPv6 are supported. - All binary files are downloaded from [https://github.com/jedisct1/dnscrypt-proxy/releases](https://github.com/jedisct1/dnscrypt-proxy/releases) + +----- + + ## Differences between default DNSCrypt Proxy project -### dnscrypt-proxy.toml -- ⛔️ Disable DoH -- ⛔️ Disable IPv6 -- ⛔️ `refused` response for blocked queries -- ✅ Require DNSSEC -- ✅ Ephemeral keys (create a new, unique key for every single DNS query) -- ℹ️ Set DNS query max. response time from `2500` to `1500`, in ms. -- ℹ️ Use [UncensoredDNS](https://blog.uncensoreddns.org/dns-servers/) as fallback resolver *(address used to initializing connection to the other resolvers)* -- ℹ️ Use `dnscrypt.nl` (NL), `dnscrypt.uk` (UK), `dnscrypt.eu` (DK/NL), `dnswarden` (DE), `charis` (DE) and `suami` (FR) +### CONFIG. FILE: *(dnscrypt-proxy.toml)* +- ✅ Required DNSSEC +- ✅ Enabled `dnscrypt_ephemeral_keys` *(create a new, unique key for every single DNS query)* +- ✅ Enabled `anonymized_dns` *(each resolver has 2 relay)* +- ⛔️ Disabled DoH +- ⛔️ Disabled IPv6 +- ℹ️ Set`refused` as response to blocked queries +- ℹ️ Set DNS query max. response time from `5000` to `1500`, in ms. +- ℹ️ Use [UncensoredDNS](https://blog.uncensoreddns.org/) as fallback resolver instead CloudFlare +- ℹ️ Use dnscrypt.nl (NL), dnscrypt.uk (UK), dnscrypt.eu (DK/NL), dnswarden (DE), charis (DE), scaleway-fr (FR) and suami (FR) +----- + ## Installation 1. Download latest `.zip` file from here or from [MY TELEGRAM CHANNEL](https://t.me/dnscrypt_proxy) and then flash it in Magisk Manager App or in Recovery. @@ -44,6 +55,10 @@ iptables -t nat -D OUTPUT -p udp ! -d 91.239.100.100 --dport 53 -j DNAT --to-des - For more detailed configuration please refer to [official documentation](https://github.com/jedisct1/dnscrypt-proxy/wiki/Configuration) - FOR MORE SUPPORT ON A GOOD PRIVACY-ORIENTED SETUP, JOIN [MY TELEGRAM CHAT](https://t.me/qd_invitation) + +----- + + ## Changelog #### v2.0.28 @@ -52,6 +67,10 @@ iptables -t nat -D OUTPUT -p udp ! -d 91.239.100.100 --dport 53 -j DNAT --to-des [Full changelog](changelog.md) + +----- + + ## Credit - DNSCrypt-Proxy2 upstream | [jedisct1](https://github.com/jedisct1/dnscrypt-proxy) - [bluemeda](https://github.com/bluemeda) for the original module