This feature is enabled by default with the line cache = true in the configuration file. Tip: dnscrypt-proxy can cache entries without relying on another program. These requirements can be configured globally with the require_dnssec, require_nolog, require_nofilter options. Look at the description for servers note which validate DNSSEC, do not log, and are uncensored. If dnscrypt-proxy has run successfully on the system before, /var/cache/dnscrypt-proxy/public-resolvers.md will also contain a list. Server_names = Ī full list of resolvers is located at the upstream page or Github. For example, to use Cloudflare's servers: To manually set which server is used, uncomment the server_names variable in the configuration file and select one or more of the servers. Thus, configuring a specific set of servers is optional. The lists will be downloaded, verified, and automatically updated. listen_addresses = ) in the configuration file, since systemd is taking care of the socket configuration.īy leaving server_names commented out in the configuration file, dnscrypt-proxy will choose the fastest server from the sources already configured under. The listen_addresses option must be set to empty (i.e.Through socket activation using dnscrypt-proxy.socket.listen_addresses = :53']) in the configuration file when using the service. The listen_addresses option must be configured (e.g.The service can be started in two mutually exclusive ways (i.e. Note: Even though there are two ways to start the proxy, upstream recommends the service one.

Opendns dnscrypt not working