Skip to content

sblighting/fdns

 
 

Repository files navigation

Firejail DNS-over-HTTPS Proxy Server

DNS over HTTPS (DoH) is a next-generation communication protocol on track on becoming a major Internet standard (RFC 8484). By adding strong encryption and authentication to the good old DNS protocol, DoH tries to eliminate some of the biggest problems DNS had from the beginning: censorship, surveillance, and man-in-the-middle attacks.

FDNS was designed to run as a local DoH proxy on a Linux desktop, or as a server for a small network. Lean and mean, it protects the computers against some of the most common cyber threats, all while improving the privacy and the system performance.

FDNS is written in C and licensed under GPLv3. The number one job is privacy. We use only DoH services from non-logging providers, while preferring small operators such as open-source enthusiasts and privacy-oriented non-profit organizations.

 

Features

  • Works out of the box with little or no configuration changes.
  • Network of 60+ non-logging DoH service providers spread around the globe. The servers are organized in several categories using a simple geographically-aware tagging system.
  • Access to specialized DoH services such as family filtering, adblocking, security, OpenNIC.
  • DNS resolver cache with a fixed TTL (default 15 minutes).
  • Blocking ads, first and third-party trackers, coinminers, etc. The filters are configurable, the user can add his own hosts filter.
  • Blocking IPv6 queries by default to reduce the DNS traffic on IPv4 networks.
  • Anti-tunneling technology: by default only A and AAAA queries are forwarded.
  • Conditional DNS forwarding support.
  • Regular DNS over UDP fallback in case the DoH service becomes unavailable.
  • Live DNS request monitoring and statistics.
  • Scalable multi-process design with a frontend process and several independent resolver processes. Security technologies: chroot, seccomp, Linux namespaces, and AppArmor.
  • Seamless integration with Firejail security sandbox.
 

About us

 

FDNS is a community project. We are not affiliated with any company, and we don’t have any commercial goals. Our focus is the Linux desktop. Home users and Linux beginners are our target market. The software is built by a large international team of volunteers on GitHub. Expert or regular Linux user, you are welcome to join us!

 

Project Status

Release 0.9.62.2 is out.

The current development version is 0.9.63.

 

About

Firejail DNS-over-HTTPS Proxy Server

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages

  • C 84.1%
  • Shell 6.7%
  • M4 6.5%
  • Makefile 2.7%