Awesome GitHub RepositoriesDNS-over-HTTPS Servers

SmartDNS is a local recursive DNS resolver and server that manages granular query rules, dual-stack networking, and encrypted gateway proxying. It functions as a DNS traffic filter and DNS64 translator, allowing IPv6-only clients to communicate with IPv4 servers. The project distinguishes itself through parallel upstream querying, which sends requests to multiple servers simultaneously to return the response with the lowest network latency. It supports DNS server virtualization, enabling the operation of multiple independent server instances on different ports, each with its own configuration

该项目是一个用于部署审查规避协议和隐身代理的集中式管理界面和编排器。它充当网络审查绕过工具，通过加密通信协议路由流量，以避开互联网防火墙和区域封锁。 该系统通过多协议 VPN 管理器和处理软件更新与系统备份的自动化代理服务器编排器脱颖而出。它利用内容分发网络来掩盖源服务器身份，并实施基于 HTTPS 的加密 DNS，以防止 DNS 污染并保护用户隐私。 该项目涵盖了广泛的管理功能，包括具有流量和时间配额的集中式用户访问控制、基于目的地的智能流量路由，以及供用户监控数据消耗的自助服务门户。系统管理可以通过专用管理面板或外部聊天机器人界面执行。

Dog is a command-line interface tool and network diagnostic utility used for querying DNS records and resolving domain names. It functions as a DNS query tool for retrieving domain information across various network transport protocols. The tool supports multi-protocol DNS transmission, allowing queries to be sent over UDP, TCP, TLS, and HTTPS. This enables secure DNS communication via encrypted channels to protect privacy and prevent interception. Capabilities include DNS query troubleshooting, record analysis, and network protocol testing to verify name server connectivity. The system prov

Blocky is a stateless DNS proxy that functions as a network-wide ad-blocker and content filter. It operates as a single binary or Docker container with no database or persistent state, accepting DNS queries over UDP, TCP, HTTPS, TLS, QUIC, and HTTP/3 through a unified plugin-based query pipeline. The core of the system is a client-group policy engine that assigns devices to named groups and applies per-group blocklists, allowlists, and upstream resolvers, with all configuration changes applied through hot-reloading without requiring a restart. The project distinguishes itself through its modu

Bromite is a privacy-focused fork of the Chromium browser for Android that blocks advertisements and tracking scripts by default, enforces encrypted HTTPS connections, and prevents browser fingerprinting without requiring any extensions or manual configuration. It applies a patch-based build system to layer privacy and security modifications directly onto the upstream Chromium codebase during compilation, integrating a filter list engine for network-level ad blocking and adding noise to browser APIs to mask device identity. The browser distinguishes itself through comprehensive privacy harden

Waterfox is a privacy-focused web browser built on a fork of the Gecko engine that removes all telemetry and tracking code while preserving full extension compatibility. It encrypts DNS queries through independent third-party resolvers to prevent centralized monitoring of browsing destinations, and organizes browser tabs into hierarchical parent-child trees with collapsible branches and keyboard-driven navigation. The browser maintains a backward-compatible runtime bridge that supports both legacy XUL-based add-ons and modern WebExtensions simultaneously, allowing users to keep using older or

这是一个 Linux 服务器自动化脚本集合，旨在自动化核心服务器软件的安装和配置。它提供了部署代理服务器、配置 DNS 服务器、管理容器基础设施以及优化 Linux 内核的专业工具。 该自动化套件通过代理协议集成地理限制绕过功能，并实施高级网络调优（如启用 BBR 拥塞控制以提升吞吐量和延迟）而脱颖而出。它还具有感知发行版的自动化功能，可检测 CPU 架构和 Linux 发行版，以应用正确的二进制版本和包管理器。 该项目的更广泛功能包括使用 Docker 和 Portainer 进行容器化设置、通过无密码登录和非标准端口配置进行服务器安全加固，以及自动化的 SSL 证书生命周期管理。此外，它还涵盖了带有广告拦截和分流路由的 DNS 管理、DHCP 分配管理，以及用于用户和服务管理的 Web 管理面板部署。

GreenTunnel 是一款旨在规避深度包检测（DPI）并绕过互联网审查的网络工具。它通过修改传出的网络数据包并加密 DNS 查询，防止互联网服务提供商和网络过滤系统检测并阻止特定的 Web 目的地。 该项目实现了 HTTP 分片代理和 HTTPS 握手分片器。这些组件将请求头和 TLS 握手记录拆分为多个片段，以向检测系统隐藏主机名和目标服务器名称。 该软件还包括一个 DNS-over-HTTPS 客户端，用于使用加密协议检索 IP 地址，防止标准 DNS 查询的拦截或欺骗。其他功能涵盖传输层的 TCP 数据包操作和分片，以规避流量检测。

This project is a network security tool providing an application network firewall, a DNS blocklist manager, and a VPN client with multi-hop capabilities. It functions as a traffic controller that allows or blocks internet access for specific applications on a device. The system distinguishes itself through a DNS-over-HTTPS firewall and traffic obfuscation tools that inject random packets to mask communication patterns and bypass regional internet censorship. It utilizes multi-hop routing to hide the origin of network traffic by chaining connections through multiple remote servers. The softwa

This project is a DNS privacy proxy and resolver that functions as a local bridge, converting plaintext DNS traffic into encrypted requests. It acts as a client for DNS-over-HTTPS and DNS-over-TLS protocols to prevent interception and spoofing of network requests. The system implements network privacy hardening by routing domain lookups through secure tunnels, which reduces the amount of plain text data leaked to internet service providers. It utilizes a profile-based connection management system to map security profiles to specific encrypted endpoints, preventing DNS hijacking and man-in-the

这是一个基于 Rust 的网络实用程序和动态 DNS 客户端，旨在监控公共 IP 地址并自动更新 Cloudflare DNS 记录和 Web 应用防火墙（WAF）访问列表。它结合使用 HTTP API 和 DNS-over-HTTPS 提供程序来识别当前的 IPv4 和 IPv6 地址。 该工具通过管理域名记录和 WAF IP 列表来保持对互联网连接不断变化的主机的安全访问。它包括一个 DNS 更改预览模式，可在不修改实时记录的情况下模拟更新，并利用任播（anycast）范围过滤来防止提供商地址空间导致的不正确记录更新。 该系统通过 Cron 表达式或固定间隔处理调度，并实现抖动 API 请求计时以避免速率限制。它涵盖了广泛的能力领域，包括双栈网络支持、基于环境的身份验证令牌秘密注入、外部状态通知以及基于心跳的健康监控。

NextDNS 是一个网络 DNS 客户端和代理，用作本地解析器、转发器和 DNS-over-HTTPS 代理。其主要目的是使用加密的 HTTPS 流量将本地名称解析请求路由到外部提供商，以提高隐私性并绕过网络限制。 该服务通过将通过 mDNS 或 DHCP 收集的客户端身份元数据嵌入到传出查询中而脱颖而出，从而允许进行设备级跟踪和应用独特的过滤配置文件。它具有高级路由逻辑，包括用于平衡公共和私有解析的拆分水平 DNS、基于域的查询引导，以及在提供商中断期间自动重路由流量的健康检查故障转移机制。 广泛地，该项目涵盖了通过 TTL 重写和本地 hosts 文件集成进行的 DNS 流量管理，以及通过具有自动失效功能的内存缓存进行的性能优化。它还包括网络管理功能，如强制门户检测和系统时间同步，以确保证书有效性。 该服务可以作为 NixOS 中的声明式系统组件部署，或直接集成到家用路由器固件中。

doggo is a multi-protocol DNS lookup client, performance analyzer, and diagnostic troubleshooting tool. It functions as a command-line utility for performing DNS queries across various transport protocols, including UDP, TCP, HTTPS, TLS, and QUIC. The project distinguishes itself through a focus on secure and distributed resolution. It implements encrypted DNS standards such as DNS over HTTPS, DNS over QUIC, and DNSCrypt, and provides DNSSEC validation to verify chains of trust for signed domains. Additionally, it can execute queries from global geographic locations via an external API to ana

This project is a serverless DNS resolver and DNS over HTTPS gateway that translates domain names into IP addresses. It functions as an edge computing DNS filter designed to encrypt queries, prevent tampering, and improve user privacy on browsers and mobile devices. The system distinguishes itself by operating as an edge DNS traffic monitor that logs and analyzes request patterns in real time. It utilizes curated blocklists at the network edge to block malicious domains and trackers. The software provides capabilities for private DNS filtering, network traffic monitoring, and the management

mosdns is a DNS forwarding server and traffic filter that routes DNS queries to multiple upstream providers. It functions as a rule-based DNS router and a proxy for DNS-over-HTTPS and DNS-over-TLS to ensure secure DNS resolution. The system utilizes a pipeline-based request processing model and rule-based query routing to direct specific domain queries to different upstream servers. It implements pluggable transport layers and forwarding protocols, including HTTPS, TLS, and QUIC, to encrypt traffic and prevent eavesdropping. The project includes capabilities for upstream load balancing to di

dnsproxy is an encrypted DNS proxy and traffic router that translates and forwards DNS requests between clients and upstream resolvers. It functions as a server for multiple secure protocols, including DNS-over-HTTPS, DNS-over-TLS, DNS-over-QUIC, and DNSCrypt, to protect queries from eavesdropping and tampering. The project differentiates itself through advanced routing and optimization capabilities. It utilizes a domain-based routing engine to direct queries to specific upstream servers via wildcard rules and employs parallel querying to return responses from the fastest responding network a

Tenta DNS is a recursive and authoritative domain name server implementation written in Go. It provides secure network resolution services by translating human-readable domain names into machine addresses while enforcing cryptographic standards to ensure data privacy and authenticity. The software distinguishes itself through a focus on secure transport and integrity verification. It utilizes encrypted tunnels for upstream communication to prevent eavesdropping and incorporates a validation engine to verify digital signatures on resource records. To manage global traffic, the system supports