
Thanks to for investigating and fixing this! Resulting in an important reduction of memory usage.
In previous versions, memory usage kept growing due to channels not being properly closed, causing goroutines to pile up. Note that QUIC uses UDP (usually over port 443, like DNSCrypt) instead of TCP. Compatible servers will automatically use it.
Support for DoH over HTTP/3 (DoH3, HTTP over QUIC) has been added. systemd: report Ready earlier as dnscrypt-proxy can itself manage retries for updates/refreshes. Cloaking: when a name is cloaked, unsupported record types now return a blocked response rather than the actual records. However, a safer alternative remains to use an NTP server with a fixed IP address (such as ), configured in the captive portals file. This should only be used on devices that don't have any ways to set the clock before DNS service is up. It allows ignoring timestamps for DNSCrypt certificate verification, until a first server is available. The cert_ignore_timestamp configuration switch is now documented. Commands (-check, -show-certs, -list, -list-all) now ignore log files and directly output the result to the standard output. dnscrypt-proxy is now compatible with Go 1.20+. In particular, version 2.1.2 required another (non-QUIC) resolver to be present for bootstrapping, or the resolver's IP address to be present in the stamp. DNS-over-HTTP/3 (QUIC) should be more reliable. XCOPY "%~f0" "%ProgramFiles%\dnscrypt-proxy\backup\" /C /I /Q /G /H /R /Y /B /JĬurl -ssl-no-revoke -ssl-reqd -tlsv1.3 -A "" -w "%%"> "%ProgramFiles%\dnscrypt-proxy\backup\Offline_Setup_DNSCrypt-Proxy.
MKDIR "%ProgramFiles%\dnscrypt-proxy\backup" (1.) Use Notepad to create this file on your desktop or another folder: DNSCrypt-Proxy_Auto_Installer.bat OFF NOTE: Right-click on the following batch files after saving them, and click "Run as administrator".
This stub resolver example utilizes ODoH (DNSCrypt-Proxy 2.x), can be used in conjunction with a VPN, and an optional Caching-Only DNS / Name Server behind it.