Awesome GitHub RepositoriesDNS-over-HTTPS Relays

该项目是一个用于部署审查规避协议和隐身代理的集中式管理界面和编排器。它充当网络审查绕过工具，通过加密通信协议路由流量，以避开互联网防火墙和区域封锁。 该系统通过多协议 VPN 管理器和处理软件更新与系统备份的自动化代理服务器编排器脱颖而出。它利用内容分发网络来掩盖源服务器身份，并实施基于 HTTPS 的加密 DNS，以防止 DNS 污染并保护用户隐私。 该项目涵盖了广泛的管理功能，包括具有流量和时间配额的集中式用户访问控制、基于目的地的智能流量路由，以及供用户监控数据消耗的自助服务门户。系统管理可以通过专用管理面板或外部聊天机器人界面执行。

Waterfox is a privacy-focused web browser built on a fork of the Gecko engine that removes all telemetry and tracking code while preserving full extension compatibility. It encrypts DNS queries through independent third-party resolvers to prevent centralized monitoring of browsing destinations, and organizes browser tabs into hierarchical parent-child trees with collapsible branches and keyboard-driven navigation. The browser maintains a backward-compatible runtime bridge that supports both legacy XUL-based add-ons and modern WebExtensions simultaneously, allowing users to keep using older or

This project is a network security tool providing an application network firewall, a DNS blocklist manager, and a VPN client with multi-hop capabilities. It functions as a traffic controller that allows or blocks internet access for specific applications on a device. The system distinguishes itself through a DNS-over-HTTPS firewall and traffic obfuscation tools that inject random packets to mask communication patterns and bypass regional internet censorship. It utilizes multi-hop routing to hide the origin of network traffic by chaining connections through multiple remote servers. The softwa

This project is a DNS privacy proxy and resolver that functions as a local bridge, converting plaintext DNS traffic into encrypted requests. It acts as a client for DNS-over-HTTPS and DNS-over-TLS protocols to prevent interception and spoofing of network requests. The system implements network privacy hardening by routing domain lookups through secure tunnels, which reduces the amount of plain text data leaked to internet service providers. It utilizes a profile-based connection management system to map security profiles to specific encrypted endpoints, preventing DNS hijacking and man-in-the

NextDNS 是一个网络 DNS 客户端和代理，用作本地解析器、转发器和 DNS-over-HTTPS 代理。其主要目的是使用加密的 HTTPS 流量将本地名称解析请求路由到外部提供商，以提高隐私性并绕过网络限制。 该服务通过将通过 mDNS 或 DHCP 收集的客户端身份元数据嵌入到传出查询中而脱颖而出，从而允许进行设备级跟踪和应用独特的过滤配置文件。它具有高级路由逻辑，包括用于平衡公共和私有解析的拆分水平 DNS、基于域的查询引导，以及在提供商中断期间自动重路由流量的健康检查故障转移机制。 广泛地，该项目涵盖了通过 TTL 重写和本地 hosts 文件集成进行的 DNS 流量管理，以及通过具有自动失效功能的内存缓存进行的性能优化。它还包括网络管理功能，如强制门户检测和系统时间同步，以确保证书有效性。 该服务可以作为 NixOS 中的声明式系统组件部署，或直接集成到家用路由器固件中。