DNSCrypt Proxy 2 for Android

A flexible DNS proxy, with support for modern encrypted DNS protocols such as DNSCrypt v2 and DNS-over-HTTP/2.

Features

• arm, arm64, x86 and x86_64 are supported.
• ipv4 and ipv6 are supported.
• All binary files are downloaded from https://github.com/jedisct1/dnscrypt-proxy/releases

Installation

• Download .zip module, flash it in Magisk Manager App or in Recovery and follow the instructions.

Set DNS server manually with 3rd-party app (not included in this module)

• DNS server address is 127.0.0.1:5354 for ipv4 and [::1]:5354 for ipv6
• If you use AfWall, you can write this enter custom script

  iptables -t nat -A OUTPUT -p tcp ! -d 9.9.9.9 --dport 53 -j DNAT --to-destination 127.0.0.1:5354
  iptables -t nat -A OUTPUT -p udp ! -d 9.9.9.9 --dport 53 -j DNAT --to-destination 127.0.0.1:5354
  ip6tables -t nat -A OUTPUT -p tcp ! -d 9.9.9.9 --dport 53 -j DNAT --to-destination [::1]:5354
  ip6tables -t nat -A OUTPUT -p udp ! -d 9.9.9.9 --dport 53 -j DNAT --to-destination [::1]:5354
  

  and this shutdown script

  iptables -t nat -D OUTPUT -p tcp ! -d 9.9.9.9 --dport 53 -j DNAT --to-destination 127.0.0.1:5354
  iptables -t nat -D OUTPUT -p udp ! -d 9.9.9.9 --dport 53 -j DNAT --to-destination 127.0.0.1:5354
  ip6tables -t nat -D OUTPUT -p tcp ! -d 9.9.9.9 --dport 53 -j DNAT --to-destination [::1]:5354
  ip6tables -t nat -D OUTPUT -p udp ! -d 9.9.9.9 --dport 53 -j DNAT --to-destination [::1]:5354
  

Configuration (post-installing)

• Configuration located on /sdcard/dnscrypt-proxy/dnscrypt-proxy.toml [or /data/media/0/dnscrypt-proxy/dnscrypt-proxy.toml]
• For more detailed configuration please refer to official documentation

Changelog

v2.8.7

• changed path of configuration file [dnscrypt-toml] from /system/etc to /data/media/0/dnscrypt-proxy [for which /sdcard is the soft link]
• uploaded example2-dnscrypt-proxy.toml [the configuration used by lindroidux]
• uploaded example3-dnscrypt-proxy.toml [updated configuration for binary files v2.0.25 used by lindroidux]
• updated configuration files to 2.0.25
• updated binary files to 2.0.25
• Removed automatic redirection of dns-request and let dnscrypt-proxy do its job only.

v2.8.5

• Fix #40

v2.8.4

• Fix failed to copy or backup config file

v2.8.3

• Fix permission issue
• Add option to replace or backup-restore config file

v2.8.2

• Fix "binary file is missing"

v2.8.1

• Update Magisk 18100 requirements

v2.8.0

• Update binary files to 2.0.22

v2.7.0

• Update binary files to 2.0.21

Full changelog

Credit

• DNSCrypt-Proxy2 upstream | jedisct1
• Keycheck binary | someone755
• Idea for keycheck code implementation | Zappo @xda-developers
• All contributor