encrypted-dns

DNS over HTTPS config profiles for iOS & macOS

Universal Linux Upgrade: this script increases system performance and security for Linux.

One-click encrypted DNS (DoH/DoT/DoQ/DNSCrypt), protection against DPI interference with zapret2 (or GoodbyeDPI on Windows), a local HTTP/SOCKS proxy with TLS fragmentation, and domain rules for Windows and Linux. ~30 MB RAM, no telemetry, always restores your original DNS. For privacy, security research and education.

DNS Profile Generator for Apple devices.

Secure DNS(also known as DNS firewall & protective DNS) with ad-blocking, threat protection, and fully encryption support for enhanced privacy and security.

pfSense package for DNSCrypt Proxy - encrypted DNS with full GUI support

Configuration profile generator for iOS and macOS to utilise DNS over HTTPS and DNS over TLS.

Professional Encrypted DNS profiles & signing tools for Apple devices.

DNS resolver with support for DNS over TLS and ad blocking

Source code release for the 2020 FOCI paper: "Padding Ain’t Enough: Assessing the Privacy Guarantees of Encrypted DNS"

iOS/iPadOS & macOS Encrypted DNS Profile

Complete Orange Pi Zero VPN & Hotspot server with encrypted DNS, restricted SSH management, and security hardening

Website fingerprinting attack on Oblivious DNS over HTTPS

DoH & DoT for pfSense with a native webGUI - zero dependencies, upstream tested before every save

Lightweight local DNS proxy that forwards queries over DNS-over-QUIC (DoQ/RFC 9250). Auto-configures Windows DNS with system tray support.

Temporarily disable and automatically restore profile-installed encrypted DNS on macOS from Raycast.

GTK4 app to enable, verify and leak-test DNS-over-TLS on Linux (NetworkManager + systemd-resolved).

eBPF defense against website fingerprinting on encrypted DNS

A privacy-conscious macOS utility for encrypted DNS and local ByeDPI-based Discord connectivity

Self-healing secure private-network stack for macOS: encrypted DNS (AdGuard DoH/ECH), Cloudflare WARP tunnel with killswitch & ProtonVPN as fallback, menu-bar control, ARP-spoof/evil-twin/port-scan monitoring and probesource; a passive/active tactics probing tool to investigate any address. Suite tested & works on Apple Silicon and Intel Macs.