From 6118916384dfe833b04c479f1cb1ab5ccd8206ef Mon Sep 17 00:00:00 2001 From: git-ed Date: Mon, 10 May 2021 16:43:07 +0800 Subject: [PATCH] Create README.md --- client-conf/dnsproxy/README.md | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) create mode 100644 client-conf/dnsproxy/README.md diff --git a/client-conf/dnsproxy/README.md b/client-conf/dnsproxy/README.md new file mode 100644 index 0000000..078ee82 --- /dev/null +++ b/client-conf/dnsproxy/README.md @@ -0,0 +1,16 @@ +# AdGuard DNSProxy Example for Linux / Mac OSX + +## Configuration sample + +``` +./dnsproxy -l ::1 -l 127.0.0.1 -p 53 -u quic://dot-jp.blahdns.com:784 -f 1.0.0.2:53 -b 1.0.0.2:53 --refuse-any +``` + +Configuration above listen to localhost `ipv4` and `ipv6`, use `quic` as upstream, `-f` as fallback server, `-b` as bootstrap lookup (only affected when using DoT, DoH, DoQ) + +Additional setup + +* `--refuse-any`: refuse `ANY` type +* `-r 10`: rate limit `10` per second +* `-p 53`: listen to port `53` +* If you want to setup a secured DNS local server, please use something like this `./dnsproxy -p=0 --tls-key=/.acme.sh/xxx.com/xxx.key --tls-cert=/.acme.sh/xxx.com/fullchain.cer --tls-port=853`