DNSCrypt-Proxy is a multi-platform command-line proxy for ensuring your DNS traffic is encrypted.
It operates by bridging applications awaiting regular DNS with secure servers that support encrypted DNS (DNSCrypt and DoH). DNSCrypt-Proxy is also capable of displaying DNS activity, cache results (to improve speed), and locally blocking unwanted content. Once DNSCrypt-Proxy has been implemented, it will keep track of all incoming and outgoing traffic - all of which are authenticated as well as encrypted.
DNS traffic encryption and authentication. Supports DNS-over-HTTPS (DoH) and DNSCrypt. -DNS query monitoring, with separate log files for regular and suspicious queries -Filtering: block ads, malware, and other unwanted content. Compatible with all DNS services -Time-based filtering, with a flexible weekly schedule -Transparent redirection of specific domains to specific resolvers -DNS caching to reduce latency and improve privacy -Local IPv6 blocking to minimize latency on IPv4-only networks -Load balancing: pick a set of resolvers; DNSCrypt-Proxy will automatically measure and keep track of their speed and balance the traffic across the fastest available ones. -Cloaking: like a HOSTS file on steroids. It can return preconfigured addresses for specific names or resolve and return the IP address of others. This can be used for local development and enforce safe search results on Google, Yahoo, and Bing. -Automatic background updates of resolvers lists -Can force outgoing connections to use TCP -Supports SOCKS proxies -Compatible with DNSSEC