1
0
mirror of https://github.com/vimagick/dockerfiles.git synced 2024-11-28 09:08:36 +02:00
dockerfiles/dnscrypt
2016-06-13 22:51:29 +08:00
..
proxy switch to new domain: easypi.info 2016-05-01 09:06:20 +08:00
wrapper upgrade dnscrypt-wrapper to 0.2.1 2016-06-13 22:51:29 +08:00
README.md switch to new domain: easypi.info 2016-05-01 09:06:20 +08:00

dnscrypt

About

  • dnscrypt-wrapper - A server-side dnscrypt proxy.
  • dnscrypt-proxy - A protocol for securing communications between a client and a DNS resolver.

Config

wrapper:
  image: vimagick/dnscrypt-wrapper
  ports:
    - "443:443/udp"
    - "443:443/tcp"
  environment:
    - LISTEN_ADDR=0.0.0.0:443
    - RESOLVER_ADDR=8.8.8.8:53
    - PROVIDER_NAME=2.dnscrypt-cert.easypi.info
  restart: always

proxy:
  image: vimagick/dnscrypt-proxy
  ports:
    - "53:53/udp"
    - "53:53/tcp"
  environment:
    - LISTEN_ADDR=0.0.0.0:443
    - RESOLVER_ADDR=1.2.3.4:443
    - PROVIDER_NAME=2.dnscrypt-cert.easypi.info
    - PROVIDER_KEY=4C29:9CEB:CF8D:4612:48A8:B2F2:3B6F:A046:EBF5:2F2B:6433:27C6:5F3A:88F5:495E:3075
  restart: always

RESOLVER_ADDR is server public ip address.

Server

$ cd dnscrypt
$ fig up -d wrapper
$ docker exec -it dnscrypt_wrapper_1 cat README.txt
Public key fingerprint: 4C29:9CEB:CF8D:4612:48A8:B2F2:3B6F:A046:EBF5:2F2B:6433:27C6:5F3A:88F5:495E:3075

Client

$ cd dnscrypt
$ fig up -d proxy
$ dig @127.0.0.1 www.google.com
$ dig @127.0.0.1 www.youtube.com +tcp

Note

You'd better to use vimagick/dnscrypt-proxy as backend of dnsmasq or pdnsd for better performance.

Please read this to re-generate keys!