Awesome GitHub RepositoriesDNS-over-HTTPS Servers

SmartDNS is a local recursive DNS resolver and server that manages granular query rules, dual-stack networking, and encrypted gateway proxying. It functions as a DNS traffic filter and DNS64 translator, allowing IPv6-only clients to communicate with IPv4 servers. The project distinguishes itself through parallel upstream querying, which sends requests to multiple servers simultaneously to return the response with the lowest network latency. It supports DNS server virtualization, enabling the operation of multiple independent server instances on different ports, each with its own configuration

Este proyecto es una interfaz de gestión centralizada y orquestador para implementar protocolos de elusión de censura y proxies sigilosos. Funciona como una herramienta de elusión de censura de red que enruta el tráfico a través de protocolos de comunicación cifrados para evitar firewalls de internet y bloqueos regionales. El sistema se distingue a través de un gestor de VPN multiprotocolo y un orquestador de servidor proxy automatizado que maneja actualizaciones de software y copias de seguridad del sistema. Utiliza redes de entrega de contenido para enmascarar las identidades de los servidores de origen e implementa DNS cifrado sobre HTTPS para evitar el envenenamiento de DNS y proteger la privacidad del usuario. El proyecto cubre una amplia gama de capacidades administrativas, incluyendo control de acceso de usuarios centralizado con cuotas de tráfico y tiempo, enrutamiento de tráfico inteligente basado en el destino y un portal de autoservicio para que los usuarios monitoreen el consumo de datos. La administración del sistema se puede realizar a través de un panel de gestión dedicado o una interfaz de bot de chat externa.

Dog is a command-line interface tool and network diagnostic utility used for querying DNS records and resolving domain names. It functions as a DNS query tool for retrieving domain information across various network transport protocols. The tool supports multi-protocol DNS transmission, allowing queries to be sent over UDP, TCP, TLS, and HTTPS. This enables secure DNS communication via encrypted channels to protect privacy and prevent interception. Capabilities include DNS query troubleshooting, record analysis, and network protocol testing to verify name server connectivity. The system prov

Blocky is a stateless DNS proxy that functions as a network-wide ad-blocker and content filter. It operates as a single binary or Docker container with no database or persistent state, accepting DNS queries over UDP, TCP, HTTPS, TLS, QUIC, and HTTP/3 through a unified plugin-based query pipeline. The core of the system is a client-group policy engine that assigns devices to named groups and applies per-group blocklists, allowlists, and upstream resolvers, with all configuration changes applied through hot-reloading without requiring a restart. The project distinguishes itself through its modu

Bromite is a privacy-focused fork of the Chromium browser for Android that blocks advertisements and tracking scripts by default, enforces encrypted HTTPS connections, and prevents browser fingerprinting without requiring any extensions or manual configuration. It applies a patch-based build system to layer privacy and security modifications directly onto the upstream Chromium codebase during compilation, integrating a filter list engine for network-level ad blocking and adding noise to browser APIs to mask device identity. The browser distinguishes itself through comprehensive privacy harden

Waterfox is a privacy-focused web browser built on a fork of the Gecko engine that removes all telemetry and tracking code while preserving full extension compatibility. It encrypts DNS queries through independent third-party resolvers to prevent centralized monitoring of browsing destinations, and organizes browser tabs into hierarchical parent-child trees with collapsible branches and keyboard-driven navigation. The browser maintains a backward-compatible runtime bridge that supports both legacy XUL-based add-ons and modern WebExtensions simultaneously, allowing users to keep using older or

Este proyecto es una colección de scripts de automatización para servidores Linux diseñados para automatizar la instalación y configuración de software de servidor central. Proporciona herramientas especializadas para desplegar servidores proxy, configurar servidores DNS, gestionar infraestructura de contenedores y optimizar el kernel de Linux. La suite de automatización se distingue por integrar capacidades de bypass de geo-restricciones mediante protocolos proxy e implementar ajustes de red avanzados, como habilitar el control de congestión BBR para mejorar el rendimiento y la latencia. También cuenta con automatización consciente de la distribución que detecta la arquitectura de CPU y las distribuciones de Linux para aplicar las versiones binarias y gestores de paquetes correctos. Las capacidades más amplias del proyecto incluyen la configuración de contenedores usando Docker y Portainer, el endurecimiento de la seguridad del servidor mediante inicio de sesión sin contraseña y configuración de puertos no estándar, y la gestión automatizada del ciclo de vida de certificados SSL. Además, cubre la administración de DNS con bloqueo de anuncios y enrutamiento split-tunnel, gestión de asignación DHCP y el despliegue de paneles administrativos basados en web para la gestión de usuarios y servicios.

GreenTunnel es una utilidad de red diseñada para eludir la inspección profunda de paquetes (DPI) y saltar la censura de internet. Funciona como una herramienta que modifica los paquetes de red salientes y cifra las consultas DNS para evitar que los proveedores de servicios de internet y los sistemas de filtrado de red detecten y bloqueen destinos web específicos. El proyecto implementa un proxy de fragmentación HTTP y un fragmentador de handshake HTTPS. Estos componentes dividen los encabezados de solicitud y los registros de handshake TLS en múltiples segmentos para ocultar los nombres de host y los nombres de servidores de destino de los sistemas de inspección. El software también incluye un cliente DNS-over-HTTPS para recuperar direcciones IP utilizando protocolos cifrados, evitando la interceptación o suplantación de consultas DNS estándar. Las capacidades adicionales cubren la manipulación de paquetes TCP y la fragmentación de segmentos en la capa de transporte para evadir la inspección de tráfico.

This project is a network security tool providing an application network firewall, a DNS blocklist manager, and a VPN client with multi-hop capabilities. It functions as a traffic controller that allows or blocks internet access for specific applications on a device. The system distinguishes itself through a DNS-over-HTTPS firewall and traffic obfuscation tools that inject random packets to mask communication patterns and bypass regional internet censorship. It utilizes multi-hop routing to hide the origin of network traffic by chaining connections through multiple remote servers. The softwa

This project is a DNS privacy proxy and resolver that functions as a local bridge, converting plaintext DNS traffic into encrypted requests. It acts as a client for DNS-over-HTTPS and DNS-over-TLS protocols to prevent interception and spoofing of network requests. The system implements network privacy hardening by routing domain lookups through secure tunnels, which reduces the amount of plain text data leaked to internet service providers. It utilizes a profile-based connection management system to map security profiles to specific encrypted endpoints, preventing DNS hijacking and man-in-the

Este proyecto es una utilidad de red basada en Rust y un cliente de DNS dinámico diseñado para monitorear direcciones IP públicas y actualizar automáticamente los registros DNS de Cloudflare y las listas de acceso del Web Application Firewall (WAF). Identifica las direcciones IPv4 e IPv6 actuales utilizando una combinación de APIs HTTP y proveedores de DNS-over-HTTPS. La herramienta se distingue por gestionar tanto los registros de dominio como las listas de IP del WAF para mantener un acceso seguro para hosts con conexiones a internet cambiantes. Incluye un modo de vista previa de cambios DNS para simular actualizaciones sin modificar los registros en vivo y utiliza filtrado de rango anycast para evitar actualizaciones de registros incorrectas desde espacios de direcciones de proveedores. El sistema gestiona la programación mediante expresiones cron o intervalos fijos e implementa tiempos de solicitud de API con jitter para evitar la limitación de tasa (rate limiting). Cubre amplias áreas de capacidad, incluyendo soporte de red de doble pila, inyección de secretos basada en el entorno para tokens de autenticación, notificaciones de estado externas y monitoreo de salud basado en latidos (heartbeat).

NextDNS is a network DNS client and proxy that functions as a local resolver, forwarder, and DNS-over-HTTPS proxy. Its primary purpose is to route local name resolution requests to external providers using encrypted HTTPS traffic to improve privacy and bypass network restrictions. The service distinguishes itself by embedding client identity metadata—collected via mDNS or DHCP—into outgoing queries, allowing for per-device tracking and the application of unique filtering profiles. It features advanced routing logic, including split-horizon DNS for balancing public and private resolution, doma

doggo is a multi-protocol DNS lookup client, performance analyzer, and diagnostic troubleshooting tool. It functions as a command-line utility for performing DNS queries across various transport protocols, including UDP, TCP, HTTPS, TLS, and QUIC. The project distinguishes itself through a focus on secure and distributed resolution. It implements encrypted DNS standards such as DNS over HTTPS, DNS over QUIC, and DNSCrypt, and provides DNSSEC validation to verify chains of trust for signed domains. Additionally, it can execute queries from global geographic locations via an external API to ana

This project is a serverless DNS resolver and DNS over HTTPS gateway that translates domain names into IP addresses. It functions as an edge computing DNS filter designed to encrypt queries, prevent tampering, and improve user privacy on browsers and mobile devices. The system distinguishes itself by operating as an edge DNS traffic monitor that logs and analyzes request patterns in real time. It utilizes curated blocklists at the network edge to block malicious domains and trackers. The software provides capabilities for private DNS filtering, network traffic monitoring, and the management

mosdns is a DNS forwarding server and traffic filter that routes DNS queries to multiple upstream providers. It functions as a rule-based DNS router and a proxy for DNS-over-HTTPS and DNS-over-TLS to ensure secure DNS resolution. The system utilizes a pipeline-based request processing model and rule-based query routing to direct specific domain queries to different upstream servers. It implements pluggable transport layers and forwarding protocols, including HTTPS, TLS, and QUIC, to encrypt traffic and prevent eavesdropping. The project includes capabilities for upstream load balancing to di

dnsproxy is an encrypted DNS proxy and traffic router that translates and forwards DNS requests between clients and upstream resolvers. It functions as a server for multiple secure protocols, including DNS-over-HTTPS, DNS-over-TLS, DNS-over-QUIC, and DNSCrypt, to protect queries from eavesdropping and tampering. The project differentiates itself through advanced routing and optimization capabilities. It utilizes a domain-based routing engine to direct queries to specific upstream servers via wildcard rules and employs parallel querying to return responses from the fastest responding network a

Tenta DNS is a recursive and authoritative domain name server implementation written in Go. It provides secure network resolution services by translating human-readable domain names into machine addresses while enforcing cryptographic standards to ensure data privacy and authenticity. The software distinguishes itself through a focus on secure transport and integrity verification. It utilizes encrypted tunnels for upstream communication to prevent eavesdropping and incorporates a validation engine to verify digital signatures on resource records. To manage global traffic, the system supports