Awesome GitHub RepositoriesDNS-over-HTTPS Clients

Bromite is a privacy-focused fork of the Chromium browser for Android that blocks advertisements and tracking scripts by default, enforces encrypted HTTPS connections, and prevents browser fingerprinting without requiring any extensions or manual configuration. It applies a patch-based build system to layer privacy and security modifications directly onto the upstream Chromium codebase during compilation, integrating a filter list engine for network-level ad blocking and adding noise to browser APIs to mask device identity. The browser distinguishes itself through comprehensive privacy harden

GreenTunnel est un utilitaire réseau conçu pour contourner l'inspection profonde de paquets (DPI) et la censure internet. Il fonctionne comme un outil qui modifie les paquets réseau sortants et chiffre les recherches DNS pour empêcher les fournisseurs d'accès internet et les systèmes de filtrage réseau de détecter et bloquer des destinations web spécifiques. Le projet implémente un proxy de fragmentation HTTP et un fragmenteur de handshake HTTPS. Ces composants divisent les en-têtes de requête et les enregistrements de handshake TLS sur plusieurs segments pour dissimuler les noms d'hôtes et les noms de serveurs de destination aux systèmes d'inspection. Le logiciel inclut également un client DNS-over-HTTPS pour récupérer les adresses IP en utilisant des protocoles chiffrés, empêchant l'interception ou l'usurpation des recherches DNS standard. Les capacités supplémentaires couvrent la manipulation de paquets TCP et la fragmentation de segments au niveau de la couche transport pour échapper à l'inspection du trafic.

This project is a DNS privacy proxy and resolver that functions as a local bridge, converting plaintext DNS traffic into encrypted requests. It acts as a client for DNS-over-HTTPS and DNS-over-TLS protocols to prevent interception and spoofing of network requests. The system implements network privacy hardening by routing domain lookups through secure tunnels, which reduces the amount of plain text data leaked to internet service providers. It utilizes a profile-based connection management system to map security profiles to specific encrypted endpoints, preventing DNS hijacking and man-in-the

This project is a Rust-based network utility and dynamic DNS client designed to monitor public IP addresses and automatically update Cloudflare DNS records and Web Application Firewall access lists. It identifies current IPv4 and IPv6 addresses using a combination of HTTP APIs and DNS-over-HTTPS providers. The tool distinguishes itself by managing both domain records and WAF IP lists to maintain secure access for hosts with changing internet connections. It includes a DNS change preview mode to simulate updates without modifying live records and utilizes anycast range filtering to prevent inc

NextDNS is a network DNS client and proxy that functions as a local resolver, forwarder, and DNS-over-HTTPS proxy. Its primary purpose is to route local name resolution requests to external providers using encrypted HTTPS traffic to improve privacy and bypass network restrictions. The service distinguishes itself by embedding client identity metadata—collected via mDNS or DHCP—into outgoing queries, allowing for per-device tracking and the application of unique filtering profiles. It features advanced routing logic, including split-horizon DNS for balancing public and private resolution, doma

doggo is a multi-protocol DNS lookup client, performance analyzer, and diagnostic troubleshooting tool. It functions as a command-line utility for performing DNS queries across various transport protocols, including UDP, TCP, HTTPS, TLS, and QUIC. The project distinguishes itself through a focus on secure and distributed resolution. It implements encrypted DNS standards such as DNS over HTTPS, DNS over QUIC, and DNSCrypt, and provides DNSSEC validation to verify chains of trust for signed domains. Additionally, it can execute queries from global geographic locations via an external API to ana