DNScrypt-proxy 2

Recent Commits

• Frank Denis (22 Jul 26)

  PQ: pad resumed UDP queries to the regular question size target Also discard oversized tickets and fall back to TCP when a query cannot fit a datagram.

• Frank Denis (22 Jul 26)

  Forwarding: only use TCP with bootstrap resolvers Everything else is just sent to local devices, so UDP is fine. Fixes #3295

• Frank Denis (19 Jul 26)

  Add the version number to the UI web pages

• Frank Denis (18 Jul 26)

  Bump

• Frank Denis (18 Jul 26)

  Improve examples

• Frank Denis (18 Jul 26)

  Real TCP queries dial a fresh connection every time

• Frank Denis (18 Jul 26)

  Start benchmarking before Write(), not the setup time

• Frank Denis (18 Jul 26)

  Stop counting PQ certs transfer time in the startup benchmark

• Frank Denis (18 Jul 26)

  Support $PROXY in forwarding rules Fixes #2441

• Frank Denis (18 Jul 26)

  Update github actions

• Frank Denis (18 Jul 26)

  Update miekg/dns

• Frank Denis (18 Jul 26)

  Fix PQ certificate fallback on fragmented UDP paths Try the rollover-sized certificate query over UDP first and return as soon as the small query succeeds so that a truncated response can trigger TCP fallback instead of waiting for large UDP probes to time out. We keep relayed UDP packets at the intended size after accounting for the Anonymized DNSCrypt header. When retrying through a relay over TCP, retain a rollover-sized inner query because the relay still forwards it to the resolver over UDP and applies the anti-amplification thing. Preserve the UDP RTT when TCP is used only to complete certificate retrieval, so resolver latency does not incorrectly appear to be the TCP fallback latency.

• Frank Denis (13 Jul 26)

  UI: limit the size of top domains map

• Frank Denis (13 Jul 26)

  Improve ODoH diagnostics

• Frank Denis (13 Jul 26)

  Update CodeQL action

• Frank Denis (13 Jul 26)

  Sync deps

• Frank Denis (13 Jul 26)

  Update deps

• Frank Denis (13 Jul 26)

  Bump

• Frank Denis (13 Jul 26)

  Mention that dnscrypt_servers also affects PQDNSCrypt

• Frank Denis (13 Jul 26)

  Reuse PQ key pairs

• Frank Denis (13 Jul 26)

  ephemeral key pairs are for X25519

• Frank Denis (13 Jul 26)

  Update README.md to include PQ stuff

• Frank Denis (13 Jul 26)

  Make pqdnscrypt a setting

• Frank Denis (13 Jul 26)

  Validate ODoH padding length Not really necessary, since responses are authenticated, but useful to spot broken server implementations.

• Frank Denis (11 Jul 26)

  local DoH: pad responses, not the incoming query

• Frank Denis (11 Jul 26)

  resolveUsingResolver: don't return an error if we got some IPs Even if this is not the full set of IPs.

• Frank Denis (11 Jul 26)

  pattern matcher: test membership, not nil

• Frank Denis (11 Jul 26)

  When using SOCKS + relay + a simple DNS exchange, send to the relay Not to the server

• Frank Denis (11 Jul 26)

  lock source.refresh

• Frank Denis (11 Jul 26)

  cache: include CD bit in the cache key