Hardened dnscrypt-proxy module for Android.
Go to file
quindecim a7757b649d Update 'README.md' 2019-10-24 04:26:05 -04:00
META-INF/com/google/android magisk 18.1 2019-04-23 16:46:32 +07:00
binary Update to 2.0.28 2019-10-12 21:04:11 -04:00
common updated service.sh 2019-06-13 08:58:26 +00:00
config Delete 'config/public-resolvers.md.txt' 2019-10-24 03:45:59 -04:00
.gitattributes initial release 2018-02-27 21:42:14 +07:00
.gitignore add gitignore 2018-02-27 22:08:08 +07:00
README.md Update 'README.md' 2019-10-24 04:26:05 -04:00
changelog.md Update to 2.0.28 2019-10-12 20:43:07 -04:00
install.sh Update to v2.0.29 2019-10-20 18:11:17 -04:00
module.prop Update to v2.0.29 2019-10-24 04:15:29 -04:00

README.md

DNSCrypt Proxy 2 for Android | privacy oriented

A flexible DNS proxy, with support for modern encrypted DNS protocols such as DNSCrypt v2, DNS-over-HTTPS and Anonymized DNSCrypt.

Features

Pre-built binaries

Up-to-date, pre-built binaries are available for:

  • Android/arm
  • Android/arm64
  • Android/x86
  • Android/x86_64

Differences between default DNSCrypt Proxy project

CONFIG. FILE: (dnscrypt-proxy.toml)

  • DNSSEC required
  • Enabled dnscrypt_ephemeral_keys (create a new, unique key for every single DNS query)
  • Enabled anonymized_dns (each resolver has 2 relay)
  • Disabled DoH
  • Disabled IPv6
  • Setrefused as response to blocked queries
  • Set DNS query max. response time from 5000 to 1500, in ms.
  • Use UncensoredDNS as fallback resolver instead CloudFlare
  • Use dnscrypt.nl (NL), dnscrypt.uk (UK), dnscrypt.eu (DK/NL), dnswarden (DE), charis (DE), scaleway-fr (FR) and suami (FR)

Installation

  1. Download latest .zip file from here or from dnscrypt-proxy-android | CHANNEL on Telegram and flash it with Magisk Manager App or with your Recovery.
  2. Reboot.
  3. Open AFWall+ and set custom script:

ENTER SCRIPT:

iptables -t nat -A OUTPUT -p tcp ! -d 91.239.100.100 --dport 53 -j DNAT --to-destination 127.0.0.1:53
iptables -t nat -A OUTPUT -p udp ! -d 91.239.100.100 --dport 53 -j DNAT --to-destination 127.0.0.1:53

SHUTDOWN SCRIPT:

iptables -t nat -D OUTPUT -p tcp ! -d 91.239.100.100 --dport 53 -j DNAT --to-destination 127.0.0.1:53
iptables -t nat -D OUTPUT -p udp ! -d 91.239.100.100 --dport 53 -j DNAT --to-destination 127.0.0.1:53

Configuration (post-installing)

  • You can edit dnscrypt-proxy.toml as you wish located on /sdcard/dnscrypt-proxy/dnscrypt-proxy.toml [or /data/media/0/dnscrypt-proxy/dnscrypt-proxy.toml]
  • For more detailed configuration please refer to official documentation
  • FOR MORE SUPPORT ON A GOOD PRIVACY-ORIENTED SETUP, JOIN dnscrypt-proxy-android | CHAT ON TELEGRAM

Changelog

v2.0.28

  • updated binary files to v2.0.28 | jedisct1

Full changelog

Credit