diff --git a/ChangeLog b/ChangeLog index 513e1443..27255d82 100644 --- a/ChangeLog +++ b/ChangeLog @@ -10,6 +10,9 @@ the configuration file to be accessible. It will send a query to an IP address of the `dnscrypt-proxy` server by default. Sending queries to arbitrary servers is also supported with the `-resolve name,address` syntax. + - Relay lists can be set to `*` for automatic relay selection. When a wildcard +is used, either for the list of servers or relays, the proxy ensures that +relays and servers are on distinct networks. - Server lists can't be older than a week any more, even if directory permissions are incorrect and cache files cannot be written. - macOS/arm64 is now officially supported. diff --git a/dnscrypt-proxy/example-dnscrypt-proxy.toml b/dnscrypt-proxy/example-dnscrypt-proxy.toml index 9d4ff031..9eb8b6d7 100644 --- a/dnscrypt-proxy/example-dnscrypt-proxy.toml +++ b/dnscrypt-proxy/example-dnscrypt-proxy.toml @@ -741,8 +741,8 @@ fragments_blocked = ['cisco', 'cisco-ipv6', 'cisco-familyshield', 'cisco-familys ## DNSCrypt stamp) or a server name. ## ## The following example routes "example-server-1" via `anon-example-1` or `anon-example-2`, -## and "example-server-2" via the relay whose relay DNS stamp -## is "sdns://gRIxMzcuNzQuMjIzLjIzNDo0NDM". +## and "example-server-2" via the relay whose relay DNS stamp is +## "sdns://gRIxMzcuNzQuMjIzLjIzNDo0NDM". ## ## !!! THESE ARE JUST EXAMPLES !!! ## @@ -751,8 +751,13 @@ fragments_blocked = ['cisco', 'cisco-ipv6', 'cisco-familyshield', 'cisco-familys ## ## Carefully choose relays and servers so that they are run by different entities. ## -## "server_name" can also be set to "*" to define a default route, but this is not -## recommended. If you do so, keep "server_names" short and distinct from relays. +## "server_name" can also be set to "*" to define a default route, for all servers. +## If a route is ["*"], the proxy automatically picks a relay on a distinct network. +## { server_name='*', via=['*'] } is also supported, but is likely to be suboptimal. +## +## Manual selection is always recommended over automatic selection, so that you can +## select (relay,server) pairs that work well and fit your own criteria (close by or +## in different countries, operated by different entities, on distinct ISPs...) # routes = [ # { server_name='example-server-1', via=['anon-example-1', 'anon-example-2'] },