2222# # The proxy will automatically pick the fastest, working servers from the list.
2323# # Remove the leading # first to enable this; lines starting with # are ignored.
2424
25- server_names = [' google' , ' cloudflare' , ' powerdns-doh' , ' dnscrypt-jp-blahdns-ipv4' , ' quad9-dnscrypt-ip4-nofilter-alt' ]
25+ # server_names = ['google', 'cloudflare', 'powerdns-doh', 'dnscrypt-jp-blahdns-ipv4', 'quad9-dnscrypt-ip4-nofilter-alt']
2626
2727# # List of local addresses and ports to listen to. Can be IPv4 and/or IPv6.
2828# # Note: When using systemd socket activation, choose an empty set (i.e. [] ).
@@ -61,7 +61,8 @@ require_nolog = true
6161# Server must not enforce its own blacklist (for parental control, ads blocking...)
6262require_nofilter = true
6363
64-
64+ # Server names to avoid even if they match all criteria
65+ disabled_server_names = [' Yandex' , ' Google' , ' cloudflare' ]
6566
6667# # Always use TCP to connect to upstream servers
6768
@@ -108,10 +109,8 @@ cert_refresh_delay = 240
108109# # don't include host names without IP addresses.
109110# # It will not be used if the configured system DNS works.
110111# # A resolver supporting DNSSEC is recommended. This may become mandatory.
111- # #
112- # # People in China may need to use 114.114.114.114:53 here.
113112
114- fallback_resolver = ' 114.114.114.114 :53'
113+ fallback_resolver = ' 9.9.9.9 :53'
115114
116115
117116# # Never try to use the system DNS settings; unconditionally use the
@@ -120,6 +119,29 @@ fallback_resolver = '114.114.114.114:53'
120119ignore_system_dns = true
121120
122121
122+ # # Maximum time (in seconds) to wait for network connectivity before
123+ # # initializing the proxy.
124+ # # Useful if the proxy is automatically started at boot, and network
125+ # # connectivity is not guaranteed to be immediately available.
126+ # # Use 0 to not test for connectivity at all (not recommended),
127+ # # and -1 to wait as much as possible.
128+
129+
130+ netprobe_timeout = 60
131+
132+
133+ # # Address and port to try initializing a connection to, just to check
134+ # # if the network is up. It can be any address and any port, even if
135+ # # there is nothing answering these on the other side. Just don't use
136+ # # a local address, as the goal is to check for Internet connectivity.
137+ # # On Windows, a datagram with a single, nul byte will be sent, only
138+ # # when the system starts.
139+ # # On other operating systems, the connection will be initialized
140+ # # but nothing will be sent at all.
141+
142+ netprobe_address = ' 9.9.9.9:53'
143+
144+
123145# # Automatic log files rotation
124146
125147# Maximum log files size in MB
@@ -185,12 +207,12 @@ cache = true
185207
186208# # Cache size
187209
188- cache_size = 256
210+ cache_size = 4096
189211
190212
191213# # Minimum TTL for cached entries
192214
193- cache_min_ttl = 600
215+ cache_min_ttl = 2400
194216
195217
196218# # Maximum TTL for cached entries
0 commit comments