pymumu/smartdns
Smartdns
SmartDNS is a local recursive DNS resolver and server that manages granular query rules, dual-stack networking, and encrypted gateway proxying. It functions as a DNS traffic filter and DNS64 translator, allowing IPv6-only clients to communicate with IPv4 servers.
The project distinguishes itself through parallel upstream querying, which sends requests to multiple servers simultaneously to return the response with the lowest network latency. It supports DNS server virtualization, enabling the operation of multiple independent server instances on different ports, each with its own configuration and client sets.
The system provides a multi-protocol transport layer supporting encrypted traffic via HTTPS, TLS, and QUIC. It includes a client-specific rule engine that applies distinct resolution and filtering policies based on the MAC or IP address of the requester, alongside suffix-based domain filtering to block advertisements and malicious websites.
Features
- DNS Resolver - Provides a self-hosted recursive DNS resolver for managing granular query rules and dual-stack networking.
- Upstream Response Racing - Queries multiple upstream DNS servers simultaneously and returns the result from the fastest responder to minimize latency.
- DNS64 Translation - Provides DNS64 translation to synthesize IPv6 addresses from IPv4 responses for IPv6-only clients.
- DNS Latency Optimizations - AdGuard Home queries multiple upstream DNS servers simultaneously and returns the IP address with the lowest response latency.
- DNS Query Optimization - Reduces resolution latency by querying multiple upstream servers simultaneously to find the fastest response.
- DNS-over-HTTPS Servers - Functions as a proxy that encrypts DNS queries using HTTPS, TLS, or QUIC for secure delivery.
- Multi-Protocol Encrypted DNS Servers - Supports multiple secure transport protocols including DoH, DoT, and DoQ to ensure encrypted DNS delivery.
- DNS64 Translation - Performs DNS64 translation by synthesizing IPv6 addresses from IPv4 records for IPv6-only clients.
- Dual-Stack Address Resolution - Processes IPv4 and IPv6 queries concurrently to optimize resolution speed and handle dual-stack networking.
- Device-Based Access Controls - Assigns distinct DNS query rules and filtering policies to specific devices using their MAC or IP addresses.
- DNS Filtering - Provides DNS-level filtering to block advertisements and malicious content via domain suffix matching.
- DNS Security Tools - Secures DNS queries using encrypted transport protocols including TLS, HTTPS, and QUIC.
- Encrypted DNS Resolvers - Secures DNS network queries using DoH, DoT, and DoQ protocols to protect user privacy.
- Domain Filtering - Filters advertisements and malicious websites using suffix-based domain matching and IP blacklisting.
- Network Traffic Filters - Blocks advertisements and malicious websites by filtering domain suffixes or specific IP addresses at the DNS level.
- Recursive DNS Resolvers - Implements a recursive DNS resolver that queries multiple upstream servers simultaneously to minimize response latency.
- Client-Based Query Rules - Implements a rule engine that applies distinct DNS resolution and filtering policies based on the requester's MAC or IP address.
- Dual-Stack Networking - Supports simultaneous IPv4 and IPv6 addressing with options to optimize resolution speed or suppress AAAA records.
- IPv6 Network Stacks - Manages dual-stack networking and DNS64 translation to allow IPv6-only clients to reach IPv4 servers.
- DNS Forwarding Routing - Routes domain requests to specific external upstream servers using conditional or encrypted protocols.
- Virtual Server Instances - Enables the operation of multiple independent DNS server instances on different ports with unique rules.
- Zone-Based Routing - Directs DNS requests to different upstream servers based on domain name matching against specific zones or suffixes.
- Multi-Instance Server Configurations - Runs independent DNS server instances on different ports, each with its own unique configuration and client sets.
- Per-Client DNS Blocking Rules - Applies distinct resolution and filtering policies based on the MAC or IP address of the requester.
- Malicious Domain Filtering - Blocks advertisements and malicious websites by matching requested domains against lists of blocked suffixes.
