Awesome GitHub RepositoriesDNS-over-HTTPS Servers

SmartDNS is a local recursive DNS resolver and server that manages granular query rules, dual-stack networking, and encrypted gateway proxying. It functions as a DNS traffic filter and DNS64 translator, allowing IPv6-only clients to communicate with IPv4 servers. The project distinguishes itself through parallel upstream querying, which sends requests to multiple servers simultaneously to return the response with the lowest network latency. It supports DNS server virtualization, enabling the operation of multiple independent server instances on different ports, each with its own configuration

Ce projet est une interface de gestion centralisée et un orchestrateur pour déployer des protocoles de contournement de la censure et des proxys furtifs. Il fonctionne comme un outil de contournement de la censure réseau qui route le trafic via des protocoles de communication chiffrés pour éviter les pare-feux internet et les blocages régionaux. Le système se distingue par un gestionnaire VPN multi-protocole et un orchestrateur de serveur proxy automatisé qui gère les mises à jour logicielles et les sauvegardes système. Il utilise des réseaux de diffusion de contenu pour masquer les identités des serveurs d'origine et implémente le DNS chiffré sur HTTPS pour empêcher l'empoisonnement DNS et protéger la vie privée des utilisateurs. Le projet couvre un large éventail de capacités administratives, incluant le contrôle d'accès utilisateur centralisé avec des quotas de trafic et de temps, le routage intelligent du trafic basé sur la destination, et un portail en libre-service pour que les utilisateurs puissent surveiller leur consommation de données. L'administration système peut être effectuée via un panneau de gestion dédié ou une interface de chatbot externe.

Dog is a command-line interface tool and network diagnostic utility used for querying DNS records and resolving domain names. It functions as a DNS query tool for retrieving domain information across various network transport protocols. The tool supports multi-protocol DNS transmission, allowing queries to be sent over UDP, TCP, TLS, and HTTPS. This enables secure DNS communication via encrypted channels to protect privacy and prevent interception. Capabilities include DNS query troubleshooting, record analysis, and network protocol testing to verify name server connectivity. The system prov

Blocky is a stateless DNS proxy that functions as a network-wide ad-blocker and content filter. It operates as a single binary or Docker container with no database or persistent state, accepting DNS queries over UDP, TCP, HTTPS, TLS, QUIC, and HTTP/3 through a unified plugin-based query pipeline. The core of the system is a client-group policy engine that assigns devices to named groups and applies per-group blocklists, allowlists, and upstream resolvers, with all configuration changes applied through hot-reloading without requiring a restart. The project distinguishes itself through its modu

Bromite is a privacy-focused fork of the Chromium browser for Android that blocks advertisements and tracking scripts by default, enforces encrypted HTTPS connections, and prevents browser fingerprinting without requiring any extensions or manual configuration. It applies a patch-based build system to layer privacy and security modifications directly onto the upstream Chromium codebase during compilation, integrating a filter list engine for network-level ad blocking and adding noise to browser APIs to mask device identity. The browser distinguishes itself through comprehensive privacy harden

Waterfox is a privacy-focused web browser built on a fork of the Gecko engine that removes all telemetry and tracking code while preserving full extension compatibility. It encrypts DNS queries through independent third-party resolvers to prevent centralized monitoring of browsing destinations, and organizes browser tabs into hierarchical parent-child trees with collapsible branches and keyboard-driven navigation. The browser maintains a backward-compatible runtime bridge that supports both legacy XUL-based add-ons and modern WebExtensions simultaneously, allowing users to keep using older or

Ce projet est une collection de scripts d'automatisation de serveurs Linux conçus pour automatiser l'installation et la configuration de logiciels serveurs essentiels. Il fournit des outils spécialisés pour déployer des serveurs proxy, configurer des serveurs DNS, gérer l'infrastructure de conteneurs et optimiser le noyau Linux. La suite d'automatisation se distingue en intégrant des capacités de contournement de géo-restriction via des protocoles proxy et en implémentant un réglage réseau avancé, tel que l'activation du contrôle de congestion BBR pour améliorer le débit et la latence. Elle propose également une automatisation consciente de la distribution qui détecte l'architecture CPU et les distributions Linux pour appliquer les versions binaires et gestionnaires de paquets corrects. Les capacités plus larges du projet incluent la configuration de conteneurisation via Docker et Portainer, le durcissement de la sécurité des serveurs via une connexion sans mot de passe et une configuration de ports non standards, ainsi que la gestion automatisée du cycle de vie des certificats SSL. De plus, il couvre l'administration DNS avec blocage de publicités et routage split-tunnel, la gestion des attributions DHCP et le déploiement de panneaux d'administration web pour la gestion des utilisateurs et des services.

GreenTunnel est un utilitaire réseau conçu pour contourner l'inspection profonde de paquets (DPI) et la censure internet. Il fonctionne comme un outil qui modifie les paquets réseau sortants et chiffre les recherches DNS pour empêcher les fournisseurs d'accès internet et les systèmes de filtrage réseau de détecter et bloquer des destinations web spécifiques. Le projet implémente un proxy de fragmentation HTTP et un fragmenteur de handshake HTTPS. Ces composants divisent les en-têtes de requête et les enregistrements de handshake TLS sur plusieurs segments pour dissimuler les noms d'hôtes et les noms de serveurs de destination aux systèmes d'inspection. Le logiciel inclut également un client DNS-over-HTTPS pour récupérer les adresses IP en utilisant des protocoles chiffrés, empêchant l'interception ou l'usurpation des recherches DNS standard. Les capacités supplémentaires couvrent la manipulation de paquets TCP et la fragmentation de segments au niveau de la couche transport pour échapper à l'inspection du trafic.

This project is a network security tool providing an application network firewall, a DNS blocklist manager, and a VPN client with multi-hop capabilities. It functions as a traffic controller that allows or blocks internet access for specific applications on a device. The system distinguishes itself through a DNS-over-HTTPS firewall and traffic obfuscation tools that inject random packets to mask communication patterns and bypass regional internet censorship. It utilizes multi-hop routing to hide the origin of network traffic by chaining connections through multiple remote servers. The softwa

This project is a DNS privacy proxy and resolver that functions as a local bridge, converting plaintext DNS traffic into encrypted requests. It acts as a client for DNS-over-HTTPS and DNS-over-TLS protocols to prevent interception and spoofing of network requests. The system implements network privacy hardening by routing domain lookups through secure tunnels, which reduces the amount of plain text data leaked to internet service providers. It utilizes a profile-based connection management system to map security profiles to specific encrypted endpoints, preventing DNS hijacking and man-in-the

This project is a Rust-based network utility and dynamic DNS client designed to monitor public IP addresses and automatically update Cloudflare DNS records and Web Application Firewall access lists. It identifies current IPv4 and IPv6 addresses using a combination of HTTP APIs and DNS-over-HTTPS providers. The tool distinguishes itself by managing both domain records and WAF IP lists to maintain secure access for hosts with changing internet connections. It includes a DNS change preview mode to simulate updates without modifying live records and utilizes anycast range filtering to prevent inc

NextDNS is a network DNS client and proxy that functions as a local resolver, forwarder, and DNS-over-HTTPS proxy. Its primary purpose is to route local name resolution requests to external providers using encrypted HTTPS traffic to improve privacy and bypass network restrictions. The service distinguishes itself by embedding client identity metadata—collected via mDNS or DHCP—into outgoing queries, allowing for per-device tracking and the application of unique filtering profiles. It features advanced routing logic, including split-horizon DNS for balancing public and private resolution, doma

doggo is a multi-protocol DNS lookup client, performance analyzer, and diagnostic troubleshooting tool. It functions as a command-line utility for performing DNS queries across various transport protocols, including UDP, TCP, HTTPS, TLS, and QUIC. The project distinguishes itself through a focus on secure and distributed resolution. It implements encrypted DNS standards such as DNS over HTTPS, DNS over QUIC, and DNSCrypt, and provides DNSSEC validation to verify chains of trust for signed domains. Additionally, it can execute queries from global geographic locations via an external API to ana

This project is a serverless DNS resolver and DNS over HTTPS gateway that translates domain names into IP addresses. It functions as an edge computing DNS filter designed to encrypt queries, prevent tampering, and improve user privacy on browsers and mobile devices. The system distinguishes itself by operating as an edge DNS traffic monitor that logs and analyzes request patterns in real time. It utilizes curated blocklists at the network edge to block malicious domains and trackers. The software provides capabilities for private DNS filtering, network traffic monitoring, and the management

mosdns is a DNS forwarding server and traffic filter that routes DNS queries to multiple upstream providers. It functions as a rule-based DNS router and a proxy for DNS-over-HTTPS and DNS-over-TLS to ensure secure DNS resolution. The system utilizes a pipeline-based request processing model and rule-based query routing to direct specific domain queries to different upstream servers. It implements pluggable transport layers and forwarding protocols, including HTTPS, TLS, and QUIC, to encrypt traffic and prevent eavesdropping. The project includes capabilities for upstream load balancing to di

dnsproxy is an encrypted DNS proxy and traffic router that translates and forwards DNS requests between clients and upstream resolvers. It functions as a server for multiple secure protocols, including DNS-over-HTTPS, DNS-over-TLS, DNS-over-QUIC, and DNSCrypt, to protect queries from eavesdropping and tampering. The project differentiates itself through advanced routing and optimization capabilities. It utilizes a domain-based routing engine to direct queries to specific upstream servers via wildcard rules and employs parallel querying to return responses from the fastest responding network a

Tenta DNS is a recursive and authoritative domain name server implementation written in Go. It provides secure network resolution services by translating human-readable domain names into machine addresses while enforcing cryptographic standards to ensure data privacy and authenticity. The software distinguishes itself through a focus on secure transport and integrity verification. It utilizes encrypted tunnels for upstream communication to prevent eavesdropping and incorporates a validation engine to verify digital signatures on resource records. To manage global traffic, the system supports