diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml index f426b4e..5661e09 100644 --- a/.github/workflows/docker-publish.yml +++ b/.github/workflows/docker-publish.yml @@ -26,7 +26,7 @@ jobs: uses: actions/checkout@v2 - name: Setup default version - run: echo "DNSCRYPT_PROXY_VERSION=2.1.14" >> $GITHUB_ENV + run: echo "DNSCRYPT_PROXY_VERSION=2.1.15" >> $GITHUB_ENV if: ${{ env.DNSCRYPT_PROXY_VERSION == '' }} - name: Setup Docker buildx diff --git a/Dockerfile b/Dockerfile index 95b2c06..f311e7c 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,5 +1,5 @@ FROM golang:alpine as build -ENV RELEASE_TAG 2.1.14 +ENV RELEASE_TAG 2.1.15 RUN apk --no-cache add git && \ git clone https://github.com/jedisct1/dnscrypt-proxy /go/src/github.com/jedisct1/ && \ cd /go/src/github.com/jedisct1/dnscrypt-proxy && \ diff --git a/README.md b/README.md index 9e1d65b..28f3e58 100644 --- a/README.md +++ b/README.md @@ -5,7 +5,8 @@ This is a Docker image containing [DNSCrypt Proxy 2.x](https://github.com/jedisct1/dnscrypt-proxy). You can use this to set up a DNS proxy on your local network which resolves queries using DNSCrypt or DNS-over-HTTPS (DoH) rather than sending plaintext DNS queries over the Internet. This image comes with a configuration which: -- [x] Runs DNScrypt-proxy 2.1.14 +- [x] Leverages caching for lower latency +- [x] Runs DNScrypt-proxy 2.1.15 - [x] Queries via DNS-over-HTTPS (DoH) and DNSCrypt - [x] Posits DNSSEC enabled, no logging, no filtering servers - [x] Listens on all interfaces diff --git a/config/dnscrypt-proxy.toml b/config/dnscrypt-proxy.toml index 5a9c4ba..3d03f38 100644 --- a/config/dnscrypt-proxy.toml +++ b/config/dnscrypt-proxy.toml @@ -202,27 +202,32 @@ block_ipv6 = true ## Enable a DNS cache to reduce latency and outgoing traffic -cache = false +cache = true ## Cache size -cache_size = 4096 +cache_size = 65536 ## Minimum TTL for cached entries -cache_min_ttl = 2400 +cache_min_ttl = 300 ## Maximum TTL for cached entries -cache_max_ttl = 86400 +cache_max_ttl = 3600 -## TTL for negatively cached entries +## Minimum TTL for negatively cached entries -cache_neg_ttl = 60 +cache_neg_min_ttl = 5 + + +## Maximum TTL for negatively cached entries + +cache_neg_max_ttl = 120