winget install --id DNSCrypt.dnscrypt-proxyAbout dnscrypt-proxy
A flexible DNS proxy, with support for modern encrypted DNS protocols such as DNSCrypt v2, DNS-over-HTTPS, Anonymized DNSCrypt and ODoH (Oblivious DoH).
What's new in 2.1.15
New public DNS monitoring website: https://status.dnscrypt.info -- Check it out! Version 2.1.15 - The proxy now dynamically reduces timeouts as the connection limit is approached, improving performance and preventing connection exhaustion under heavy load. - Fixed crashes in the configuration file watcher when fsnotify creation fails. - DHCP resolver errors ($DHCP forwarding) are now properly logged and visible to system administrators. - Fixed double-bracketing of IPv6 addresses in DoH stamps that could prevent proper connection to IPv6 DoH servers. - Cache statistics are now more accurate by only counting queries that actually participate in caching. - The monitoring UI has been enhanced with server health indicators and improved display of resolver performance metrics. - Proxy hostnames (when using SOCKS/HTTP proxies) are now pre-resolved using bootstrap resolvers if they are domain names. - Multiple IP addresses per hostname are now cached instead of randomly selecting one, improving connection reliability for multi-homed servers.
Version history
| Version | Updated | Notes |
|---|---|---|
| 2.1.15 | Unknown | New public DNS monitoring website: https://status.dnscrypt.info -- Check it out! Version 2.1.15 - The proxy now dynamically reduces timeouts as the connection limit is approached, improving performance and preventing con... |
| 2.1.14 | Unknown | Version 2.1.14 - Added support for client IP address encryption in logs using IPCrypt. Three algorithms are supported: deterministic, non-deterministic with 8-byte tweak, and extended non-deterministic with 16-byte tweak... |
| 2.1.13 | Unknown | Version 2.1.13 - Fixed race conditions in WebSocket handling for the monitoring dashboard, improving stability and preventing potential crashes. - Manual configuration reload via SIGHUP is now supported regardless of the... |
| 2.1.12 | Unknown | - A new Weighted Power of Two (wp2) load balancing strategy has been implemented as the default, providing improved distribution across resolvers. - An optional Prometheus metrics endpoint has been added for monitoring a... |
| 2.1.8 | Unknown | Version 2.1.8 - Dependencies have been updated, notably the QUIC implementation, which could be vulnerable to denial-of-service attacks. - In forwarding rules, the target can now optionally include a non-standard DNS por... |
| 2.1.5 | Unknown | - dnscrypt-proxy can be compiled with Go 1.21.0+ - Responses to blocked queries now include extended error codes - Reliability of connections using HTTP/3 has been improved - New configuration directive: tls_key_log_file... |
| 2.1.4 | Unknown | Release notes |