Skip to content

Commit 6a954b6

Browse files
authored
Update dnscrypt-proxy.toml
Removed specified servers Removed 114.114.114.114 fall backresolver; changed back to 9.9.9.9 Changed DNS Cache settings
1 parent e675653 commit 6a954b6

1 file changed

Lines changed: 29 additions & 7 deletions

File tree

config/dnscrypt-proxy.toml

Lines changed: 29 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@
2222
## The proxy will automatically pick the fastest, working servers from the list.
2323
## Remove the leading # first to enable this; lines starting with # are ignored.
2424

25-
server_names = ['google', 'cloudflare', 'powerdns-doh', 'dnscrypt-jp-blahdns-ipv4', 'quad9-dnscrypt-ip4-nofilter-alt']
25+
# server_names = ['google', 'cloudflare', 'powerdns-doh', 'dnscrypt-jp-blahdns-ipv4', 'quad9-dnscrypt-ip4-nofilter-alt']
2626

2727
## List of local addresses and ports to listen to. Can be IPv4 and/or IPv6.
2828
## Note: When using systemd socket activation, choose an empty set (i.e. [] ).
@@ -61,7 +61,8 @@ require_nolog = true
6161
# Server must not enforce its own blacklist (for parental control, ads blocking...)
6262
require_nofilter = true
6363

64-
64+
# Server names to avoid even if they match all criteria
65+
disabled_server_names = ['Yandex', 'Google', 'cloudflare']
6566

6667
## Always use TCP to connect to upstream servers
6768

@@ -108,10 +109,8 @@ cert_refresh_delay = 240
108109
## don't include host names without IP addresses.
109110
## It will not be used if the configured system DNS works.
110111
## A resolver supporting DNSSEC is recommended. This may become mandatory.
111-
##
112-
## People in China may need to use 114.114.114.114:53 here.
113112

114-
fallback_resolver = '114.114.114.114:53'
113+
fallback_resolver = '9.9.9.9:53'
115114

116115

117116
## Never try to use the system DNS settings; unconditionally use the
@@ -120,6 +119,29 @@ fallback_resolver = '114.114.114.114:53'
120119
ignore_system_dns = true
121120

122121

122+
## Maximum time (in seconds) to wait for network connectivity before
123+
## initializing the proxy.
124+
## Useful if the proxy is automatically started at boot, and network
125+
## connectivity is not guaranteed to be immediately available.
126+
## Use 0 to not test for connectivity at all (not recommended),
127+
## and -1 to wait as much as possible.
128+
129+
130+
netprobe_timeout = 60
131+
132+
133+
## Address and port to try initializing a connection to, just to check
134+
## if the network is up. It can be any address and any port, even if
135+
## there is nothing answering these on the other side. Just don't use
136+
## a local address, as the goal is to check for Internet connectivity.
137+
## On Windows, a datagram with a single, nul byte will be sent, only
138+
## when the system starts.
139+
## On other operating systems, the connection will be initialized
140+
## but nothing will be sent at all.
141+
142+
netprobe_address = '9.9.9.9:53'
143+
144+
123145
## Automatic log files rotation
124146

125147
# Maximum log files size in MB
@@ -185,12 +207,12 @@ cache = true
185207

186208
## Cache size
187209

188-
cache_size = 256
210+
cache_size = 4096
189211

190212

191213
## Minimum TTL for cached entries
192214

193-
cache_min_ttl = 600
215+
cache_min_ttl = 2400
194216

195217

196218
## Maximum TTL for cached entries

0 commit comments

Comments
 (0)