mirrors/dnscrypt-proxy
1
0
Fork 0
mirror of https://github.com/DNSCrypt/dnscrypt-proxy.git synced 2025-03-04 02:14:40 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Created Connecting to a remote dnscrypt-proxy client from Android Pie using DNS-over-TLS (markdown)

Robert J 2018-12-30 02:02:53 +01:00
parent cdccd6a466
commit e98dd9bb69
1 changed files with 36 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

36
Connecting-to-a-remote-dnscrypt-proxy-client-from-Android-Pie-using-DNS-over-TLS.md Normal file

@ -0,0 +1,36 @@
Since Android Pie supports configurable **DNS-over-TLS** it is very easy to redirect DNS queries from smartphone to your own server running dnscrypt-proxy (with your own blacklists, whitelists, timeblocks, adblocking etc.). No additional app is required.
You will need:
* server with dnscrypt-proxy of course
* nginx with stream modules ( build with _--with-stream_, _--with-stream_ssl_module_ options)
* open port 853
Just add this snippet to nginx.conf
```
stream {
upstream dns-servers {
server 127.0.0.1:53;
}
server {
listen 853 ssl;
proxy_pass dns-servers;
ssl_certificate /etc/nginx/ssl/dot-server.crt;
ssl_certificate_key /etc/nginx/ssl/dot-server.key;
ssl_protocols TLSv1.2;
ssl_ciphers HIGH:!aNULL:!MD5;
ssl_handshake_timeout 10s;
ssl_session_cache shared:SSL:20m;
ssl_session_timeout 4h;
}
}
```
Restart nginx.
In Android Pie go to **Settings--Network--Advanced--Private DNS** and add the name of your server. This setting will persists for Wifi and Mobile connections.