Alternatives to dnsproxy
A simple DNS proxy server supporting DNS-over-TLS, DNS-over-HTTPS, DNSCrypt and DNS-over-QUIC. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
dnsproxy
A simple DNS proxy server supporting DNS-over-TLS, DNS-over-HTTPS, DNSCrypt and DNS-over-QUIC.
Replacements
Listings that take over the same core job as dnsproxy.
dnscrypt-proxy
Encrypts your DNS lookups so your internet provider cannot read or tamper with them, and blocks domains while it is there.
dnscrypt-proxy adds Anonymized DNS, Oblivious DoH, filtering and resolver speed balancing, configured through a TOML file.
AdGuard DNS CLI
A lightweight cross-platform DNS client that forwards a machine's DNS requests to AdGuard DNS.
AdGuard DNS CLI is a lightweight forwarder with an MSI installer for Windows, but it is built around the AdGuard DNS service.
RouteDNS
A DNS stub resolver, proxy and router with blocklists and DoT, DoH, DoQ and DTLS support.
RouteDNS adds DTLS upstreams, flexible query routing and built-in blocklists, with file-based configuration.
Stubby
Local DNS stub resolver that encrypts queries with DNS-over-TLS.
Stubby is BSD-3-Clause licensed and encrypts DNS with DNS-over-TLS only, with a strict profile that refuses unencrypted fallback.
mosdns
A plugin-based DNS forwarder with rule-based routing, domain blocking and encrypted DNS support.
mosdns adds rule-based routing to different upstreams and domain blocking with DoT, DoH and DoQ, but its documentation is in Chinese.
SmartDNS
A local DNS server that queries several upstream resolvers and returns the fastest-responding IP address.
SmartDNS returns the fastest upstream answer from DoT, DoH, DoQ and DoH3 resolvers and can block ad domains through rules.
YogaDNS
A Windows DNS client that intercepts system DNS requests and sends them over encrypted protocols by rule.
YogaDNS is a closed-source freemium Windows client that captures system DNS automatically and routes it by per-hostname rules.
Similar software
Related functionality, not a direct replacement.
AdGuard Home
Network-wide ad and tracker blocking in a single binary, with encrypted DNS built in rather than bolted on.
AdGuard DNS
Public filtering DNS resolver with encrypted transports.
Unbound
Validating, recursive, caching DNS resolver.
Blocky
Lightweight DNS proxy with blocklists, written for container deployments.