From dd0139b3f1815f19072951cf107e0a6f44b67624 Mon Sep 17 00:00:00 2001 From: quindecim Date: Thu, 16 Jan 2020 10:11:53 -0500 Subject: [PATCH] Upstream | Support multiple fallback resolvers https://github.com/DNSCrypt/dnscrypt-proxy/commit/7ada3fcfb885aa2f262a1d3bdeb3e07d5fd1d603#diff-f6f04170f3c6b8b556a88fa842de545c --- config/dnscrypt-proxy.toml | 18 ++++++++++-------- 1 file changed, 10 insertions(+), 8 deletions(-) diff --git a/config/dnscrypt-proxy.toml b/config/dnscrypt-proxy.toml index 60298b1..5796b42 100644 --- a/config/dnscrypt-proxy.toml +++ b/config/dnscrypt-proxy.toml @@ -181,21 +181,23 @@ dnscrypt_ephemeral_keys = true # tls_cipher_suite = [52392, 49199] -## Fallback resolver -## This is a normal, non-encrypted DNS resolver, that will be only used +## Fallback resolvers +## These are normal, non-encrypted DNS resolvers, that will be only used ## for one-shot queries when retrieving the initial resolvers list, and ## only if the system DNS configuration doesn't work. -## No user application queries will ever be leaked through this resolver, -## and it will not be used after IP addresses of resolvers URLs have been found. -## It will never be used if lists have already been cached, and if stamps +## No user application queries will ever be leaked through these resolvers, +## and they will not be used after IP addresses of resolvers URLs have been found. +## They will never be used if lists have already been cached, and if stamps ## don't include host names without IP addresses. -## It will not be used if the configured system DNS works. -## A resolver supporting DNSSEC is recommended. +## They will not be used if the configured system DNS works. +## Resolver supporting DNSSEC are recommended. ## ## People in China may need to use 114.114.114.114:53 here. ## Other popular options include 8.8.8.8 and 1.1.1.1. +## +## If more than one resolver are specified, they will be tried in sequence. -fallback_resolver = '91.239.100.100:53' +fallback_resolvers = ['91.239.100.100:53'] ## Always use the fallback resolver before the system DNS settings.