awesome-repositories.com
Blog
MCP
awesome-repositories.com

Discover the best open-source repositories with AI-powered search.

ExploreCurated searchesOpen-source alternativesSelf-hosted softwareBlogSitemap
ProjectMCP serverAboutHow we rankPress
LegalPrivacyTerms
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
paulmillr avatar

paulmillr/encrypted-dns

0
View on GitHub↗
4,415 stars·416 forks·JavaScript·unlicense·14 viewspaulmillr.com/posts/encrypted-dns↗

Encrypted Dns

This project is a DNS privacy proxy and resolver that functions as a local bridge, converting plaintext DNS traffic into encrypted requests. It acts as a client for DNS-over-HTTPS and DNS-over-TLS protocols to prevent interception and spoofing of network requests.

The system implements network privacy hardening by routing domain lookups through secure tunnels, which reduces the amount of plain text data leaked to internet service providers. It utilizes a profile-based connection management system to map security profiles to specific encrypted endpoints, preventing DNS hijacking and man-in-the-middle attacks.

The tool covers a range of secure resolution capabilities, including TLS-handshake authentication and stateless query resolution. It handles binary packet parsing and utilizes an asynchronous request pipeline to process multiple DNS queries concurrently.

Features

  • Network Privacy Hardening - Hardens network privacy by routing all DNS lookups through encrypted tunnels to reduce data leakage.
  • DNS-over-HTTPS Clients - Routes DNS lookups through HTTPS connections to secure domain resolution against man-in-the-middle attacks.
  • DNS-over-HTTPS Relays - Converts plaintext DNS queries into encrypted DNS-over-HTTPS or DNS-over-TLS requests to prevent interception and spoofing.
  • DNS-over-TLS Clients - Converts DNS queries into encrypted DNS-over-TLS requests for secure resolution.
  • Local Encrypted DNS Resolvers - Acts as a local bridge that forwards system DNS traffic to encrypted upstream resolvers without modifying network settings.
  • DNS Proxy Bridges - Intercepts plaintext DNS traffic on localhost and forwards it over encrypted upstream connections.
  • DNS Wire-Format Parsers - Directly parses raw DNS wire-format packets without intermediate abstraction layers.
  • TLS Certificate Validations - Validates server certificates during TLS handshake to prevent man-in-the-middle attacks.
  • DNS Connection Profiles - Maps named security profiles to specific encrypted DNS endpoints for per-query routing decisions.
  • Stateless DNS Proxies - Resolves each DNS query independently without maintaining session state between requests.
  • DNS Configuration - Applies ready-made configuration profiles that route all system DNS traffic through encrypted protocols.
  • Encrypted DNS Profile Installers - Installs pre-built configuration profiles that route all system DNS traffic through encrypted protocols automatically.
  • Encrypted DNS Profile Installers - Installs a configuration profile on iOS or macOS that routes all DNS traffic through encrypted servers.

Star history

Star history chart for paulmillr/encrypted-dnsStar history chart for paulmillr/encrypted-dns

How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.

AI search

Explore more awesome repositories

Describe what you need in plain English — the AI ranks thousands of curated open-source projects by relevance.

Start searching with AI

Open-source alternatives to Encrypted Dns

Similar open-source projects, ranked by how many features they share with Encrypted Dns.
  • nextdns/nextdnsnextdns avatar

    nextdns/nextdns

    4,072View on GitHub↗

    NextDNS is a network DNS client and proxy that functions as a local resolver, forwarder, and DNS-over-HTTPS proxy. Its primary purpose is to route local name resolution requests to external providers using encrypted HTTPS traffic to improve privacy and bypass network restrictions. The service distinguishes itself by embedding client identity metadata—collected via mDNS or DHCP—into outgoing queries, allowing for per-device tracking and the application of unique filtering profiles. It features advanced routing logic, including split-horizon DNS for balancing public and private resolution, doma

    Godnsdns-over-https
    View on GitHub↗4,072
  • gmoogway/shadowrocket-rulesGMOogway avatar

    GMOogway/shadowrocket-rules

    4,055View on GitHub↗

    This project provides a set of curated configuration rules and domain lists for the Shadowrocket app. It consists of network traffic routing rules, ad-blocking domain lists, DNS configuration profiles, and proxy bypass lists used to filter and direct network traffic. The rules establish policy-based routing logic to determine whether specific traffic is proxied, connected directly, or rejected. This includes specialized lists for proxy bypass management and the blocking of known advertising and tracking domains at the network level. The project covers a broad range of traffic management capa

    adblockdirectgfw
    View on GitHub↗4,055
  • gorhill/umatrixgorhill avatar

    gorhill/uMatrix

    4,680View on GitHub↗

    uMatrix is a browser network request filter that manages network traffic through a matrix-based interface. It functions as a granular traffic controller and web privacy firewall, allowing users to block or allow traffic based on the source, destination, and request type. The project distinguishes itself through a point-and-click interface for managing first-party and third-party traffic. It provides a layered rule system for content security management and web privacy hardening, including the ability to spoof user-agent strings and control referrers on a per-site basis. The system incorporat

    JavaScript
    View on GitHub↗4,680
  • 0xerr0r/blocky0xERR0R avatar

    0xERR0R/blocky

    6,653View on GitHub↗

    Blocky is a stateless DNS proxy that functions as a network-wide ad-blocker and content filter. It operates as a single binary or Docker container with no database or persistent state, accepting DNS queries over UDP, TCP, HTTPS, TLS, QUIC, and HTTP/3 through a unified plugin-based query pipeline. The core of the system is a client-group policy engine that assigns devices to named groups and applies per-group blocklists, allowlists, and upstream resolvers, with all configuration changes applied through hot-reloading without requiring a restart. The project distinguishes itself through its modu

    Goad-blockeradblockadblocker
    View on GitHub↗6,653
See all 30 alternatives to Encrypted Dns→

Frequently asked questions

What does paulmillr/encrypted-dns do?

This project is a DNS privacy proxy and resolver that functions as a local bridge, converting plaintext DNS traffic into encrypted requests. It acts as a client for DNS-over-HTTPS and DNS-over-TLS protocols to prevent interception and spoofing of network requests.

What are the main features of paulmillr/encrypted-dns?

The main features of paulmillr/encrypted-dns are: Network Privacy Hardening, DNS-over-HTTPS Clients, DNS-over-HTTPS Relays, DNS-over-TLS Clients, Local Encrypted DNS Resolvers, DNS Proxy Bridges, DNS Wire-Format Parsers, TLS Certificate Validations.

What are some open-source alternatives to paulmillr/encrypted-dns?

Open-source alternatives to paulmillr/encrypted-dns include: nextdns/nextdns — NextDNS is a network DNS client and proxy that functions as a local resolver, forwarder, and DNS-over-HTTPS proxy. Its… gmoogway/shadowrocket-rules — This project provides a set of curated configuration rules and domain lists for the Shadowrocket app. It consists of… gorhill/umatrix — uMatrix is a browser network request filter that manages network traffic through a matrix-based interface. It… browserworks/waterfox — Waterfox is a privacy-focused web browser built on a fork of the Gecko engine that removes all telemetry and tracking… 0xerr0r/blocky — Blocky is a stateless DNS proxy that functions as a network-wide ad-blocker and content filter. It operates as a… bromite/bromite — Bromite is a privacy-focused fork of the Chromium browser for Android that blocks advertisements and tracking scripts…