dnscrypt-proxy 2 is a DNS proxy that supports modern encrypted DNS protocols including DNSCrypt v2, DNS-over-HTTPS, Anonymized DNSCrypt, and Oblivious DoH.
The tool addresses the need to encrypt DNS queries and hide client identity from DNS resolvers. It works by intercepting DNS traffic and forwarding it through encrypted channels, with options to route traffic through Tor, SOCKS proxies, or Anonymized DNS relays to conceal the client's IP address. The proxy includes DNS caching to reduce latency, query filtering to block ads and malware, load balancing across multiple resolvers, and a local DoH server for ECH support. It also provides cloaking functionality similar to a hosts file for redirecting specific domains and enforcing safe search results.
Adoption makes sense for users prioritizing DNS privacy and those running systems where encrypted DNS support is needed across multiple applications. The tool suits both individual machines and network-wide deployment scenarios. It works with any DNS service and is compatible with DNSSEC. The project provides pre-built binaries for a wide range of platforms including Linux, macOS, Windows, BSD variants, and Android, making deployment straightforward across different environments.
Development activity shows consistent engagement with the project. The repository maintains active discussions for community interaction. Configuration hot-reloading is available as an optional feature, though it remains disabled by default. The tool supports automatic background updates of resolver lists, reducing manual maintenance overhead. Documentation is comprehensive, with a dedicated project website providing protocol specifications, public server lists, and implementation guides.
