DNSCrypt Proxy 2 for Android

A flexible DNS proxy, with support for modern encrypted DNS protocols such as DNSCrypt v2 and DNS-over-HTTP/2.

Features

• For arm64 only
• ipv4 and ipv6 are supported.
• All binary files are downloaded from https://github.com/jedisct1/dnscrypt-proxy/releases

Installation

• Download .zip module, flash it in Magisk Manager App or in Recovery and follow the instructions.
• There are two option in installation progress.

Auto redirect DNS queries using iptables

Just flash and forget.

Set DNS server manually with 3rd-party app (not included in this module)

• DNS server address is 127.0.0.1:53 for ipv4 and [::1]:53 for ipv6
• If you use AfWall, you can write this enter custom script

  iptables -t nat -A OUTPUT -p tcp ! -d 1.1.1.1 --dport 53 -j DNAT --to-destination 127.0.0.1:53
  iptables -t nat -A OUTPUT -p udp ! -d 1.1.1.1 --dport 53 -j DNAT --to-destination 127.0.0.1:53
  ip6tables -t nat -A OUTPUT -p tcp ! -d 1.1.1.1 --dport 53 -j DNAT --to-destination [::1]:53
  ip6tables -t nat -A OUTPUT -p udp ! -d 1.1.1.1 --dport 53 -j DNAT --to-destination [::1]:53
  

  and this shutdown script

  iptables -t nat -D OUTPUT -p tcp ! -d 1.1.1.1 --dport 53 -j DNAT --to-destination 127.0.0.1:53
  iptables -t nat -D OUTPUT -p udp ! -d 1.1.1.1 --dport 53 -j DNAT --to-destination 127.0.0.1:53
  ip6tables -t nat -D OUTPUT -p tcp ! -d 1.1.1.1 --dport 53 -j DNAT --to-destination [::1]:53
  ip6tables -t nat -D OUTPUT -p udp ! -d 1.1.1.1 --dport 53 -j DNAT --to-destination [::1]:53
  

Configuration (post-installing)

• Configuration located on /system/etc/dnscrypt-proxy/dnscrypt-proxy.toml
• For more detailed configuration please refer to official documentation

Changelog

v2.6.0

• Update binary files to 2.0.17

v2.5.0

• Update binary files to 2.0.16
• Add exception for cloudflare fallback resolver.
• Update Magisk Module Template 17000

v2.4.0

• Update binary files to 2.0.14

v2.3.0

• Update binary files to 2.0.10 (changelog)
• Add option to choose auto redirect DNS or manually set with 3rd-party app.

older version changelog

Credit

• DNSCrypt-Proxy2 upstream | jedisct1
• Keycheck binary | someone755
• Idea for keycheck code implementation | Zappo @xda-developers