DNSCrypt/dnscrypt-proxy

Health v2 · maintenance only

Adoption not part of the score

13600 stars · 1128 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

dnscrypt-proxy is a flexible local DNS proxy that encrypts and authenticates DNS traffic using DNSCrypt v2, DNS-over-HTTPS, Anonymized DNS, and Oblivious DoH. It also provides DNS caching, load balancing across resolvers, ad/malware filtering, and client IP anonymization via relays, Tor, or SOCKS proxies.

Use cases

• encrypt my DNS traffic to prevent ISP snooping
• block ads and malware at the DNS level
• hide my IP address from DNS resolvers
• set up DNS-over-HTTPS locally on my router
• bypass DNS spoofing and censorship
• load balance across multiple fast DNS resolvers
• force safe search on Google and Bing for my family

When to choose

• you want encrypted, authenticated DNS with no plaintext bootstrap and no CA dependency
• you need anonymized DNS relays or ODoH to hide client IPs from resolvers
• you want a single local proxy combining encryption, caching, filtering, and load balancing
• you need censorship-resistant DNS with no SNI or fixed port signatures

When to avoid

• you just need a simple recursive DNS server rather than a forwarding proxy
• you want a GUI-managed DNS solution with a web dashboard
• you need full DNSSEC validation as your primary requirement

Facets

service · maturity stable

proxy caching security privacy networking security privacy networking self-hosted censorship-circumvention windows bsd cross-platform go cli self-hosted dns dnscrypt dns-over-https doh odoh anonymized-dns dns-encryption ad-blocking dns-filtering censorship-resistance linux macos android ios

Member repositories

For agents

markdown · JSON · MCP: product_card(name="DNSCrypt/dnscrypt-proxy")